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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an information recording and regenerating 
device and a method therefor having a constitution wherein whether legal record 
content is recorded or not is determined to conduct regenerationin content 
regeneration. 

SOLUTION: A digital signature and a public key certificate are recorded when a 
data is recorded in an information recording mediumto allow a recorder recorded 
with a content to be specified. Even when a recording medium containing the data 
recorded illegally is distributedthe recorder is specified to be eliminated from a 
system. An information regenerator confirms the reasonability of the signature and 
the pub ic key certificate when reading out the dataspecifys a content recoring 
personconfirms no presence of altering in the public key certificate and the digital 
signatureand regenerates thereafter the data. Use (regeneration) of the record 
content by the illegal recorder is efficiently eliminated by this constitution. 



CLAIMS 



[Claim(s)] 

[Claim l]Verification processing of an enciphered content record subject's public 
key certification stored in said recording medium in an information reproducing 
device which reproduces information from a recording medium is performedSaid 



contents recording subject's public key is acquired from a public key certification 
in which justification was checkedAn information reproducing device performing 
verification processing of a contents recording subject's digital signatureand 
performing decoding processing of enciphered content based on an acquired this 
public key as a result of this verification on condition that the justification of a 
signature was checked. 

[Claim 2]Said cipher-processing means performs verification processing of a 
contents recording subject's digital signature generated considering contents of 
enciphered content stored in said recording medium as a candidate for a 
signatureThe information reproducing device according to claim 1 being the 
composition of performing decoding processing of enciphered content as a result 
of this verification on condition that the justification of a signature was checked. 
[Claim 3]Said cipher-processing means performs verification processing of a 
contents recording subject's digital signature generated considering a title key set 
up corresponding to enciphered content stored in said recording medium as a 
candidate for a signatureThe information reproducing device according to claim 1 
being the composition of performing decoding processing of enciphered content as 
a result of this verification on condition that the justification of a signature was 
checked. 

[Claim 4]Said information reproducing device holds a node key peculiar to each 
node which constitutes hierarchy key tree structure which used several different 
information reproducing devices as a leafand a leaf key peculiar to each 
information reproducing deviceSaid cipher-processing meansDecoding of validation 
key blocks (EKB) which consist of encryption processed data of a higher rank key 
by a low rank key on a path of a key tree based on a key built in said information 
reproducing device is performed. The information reproducing device according to 
claim 1 having the composition which acquires data for decryption key generation 
required for decoding processing of code data stored in said recording medium. 
[Claim 5]The information reproducing device according to claim 4wherein said data 
for decryption key generation is a medium key peculiar to a common master key or 
a recording medium in two or more information reproducing devices. 
[Claim 6]Have a cipher-processing means to perform encryption processing of 
contents stored in a recording medium in the Information Storage Division device 
which records information to a recording mediumand this cipher-processing 
meansThe Information Storage Division device having the composition which 
performs processing which generates a digital signature of a record subject of said 
storing contentsmatches a public key certification of enciphered contenta digital 
signatureand an enciphered content record subjectand is stored in a recording 
medium, 

[Claim 7]The Information Storage Division device according to claim 6 having the 
composition which performs processing which said Information Storage Division 
device generates storing contentsa digital signatureand a management table that 
matched an address of a public key certificationand is stored in said recording 
medium. 



[Claim 8]The Information Storage Division device according to claim 6wherein said 
cipher-processing means is the composition of performing generation processing 
of a contents recording subject's digital signature by making applicable to a 
signature contents of enciphered content stored in said recording mediummatching 
a generated signature with storing contents and storing it. 

[Claim 9]Said cipher-processing means makes applicable to a signature a title key 
set up corresponding to enciphered content stored in said recording mediumand 
generation processing of a contents recording subject's digital signature is 
performedThe Information Storage Division device according to claim 6 being the 
composition of matching a generated signature with storing contents and storing it. 
[Claim 10]Said Information Storage Division device holds a node key peculiar to 
each node which constitutes hierarchy key tree structure which used several 
different Information Storage Division devices as a leafand a leaf key peculiar to 
each Information Storage Division deviceSaid cipher-processing meansDecoding of 
validation key blocks (EKB) which consist of encryption processed data of a higher 
rank key by a low rank key on a path of a key tree based on a key built in said 
Information Storage Division device is performed. The Information Storage Division 
device according to claim 6 having the composition which acquires data for 
cryptographic key generation required for data encryption processing stored in 
said recording medium. 

[Claim 11]The Information Storage Division device according to claim "lOwherein 
said data for cryptographic key generation is a medium key peculiar to a common 
master key or a recording medium in two or more Information Storage Division 
devices. 

[Claim 12]An information reproduction mode which reproduces information from a 
recording mediumcomprising: 

Public key certification verification steps which perform verification processing of 
an enciphered content record subject's public key certification stored in said 
recording medium. 

Said contents recording subject's public key is acquired from a public key 
certification in which justification was checkedSignature verification steps which 
perform verification processing of a contents recording subject's digital signature 
based on an acquired this public keyand a step which performs decoding 
processing of enciphered content as a result of this signature verification on 
condition that the justification of a signature was checked. 

[Claim 13]Said signature verification steps in said information reproduction modeA 
step which performs verification processing of a contents recording subject's 
digital signature generated considering contents of enciphered content stored in 
said recording medium as a candidate for a signature is includedThe information 
reproduction mode according to claim 12 performing decoding processing of 
enciphered content as a result of this verification on condition that the 
justification of a signature was checked. 

[Claim 14]Said signature verification steps in said information reproduction modeA 



step which performs verification processing of a contents recording subject's 
digital signature generated considering a title key set up corresponding to 
enciphered content stored in said recording medium as a candidate for a signature 
is includedThe information reproduction mode according to claim 12 performing 
decoding processing of enciphered content as a result of this verification on 
condition that the justification of a signature was checked. 

[Claim 15]Based on a node key peculiar to each node which constitutes hierarchy 
key tree structure which used several different information reproducing devices as 
a leaf furtherand a leaf key peculiar to each information reproducing devicesaid 
information reproduction modeThe information reproduction mode according to 
claim 12 performing processing which acquires data for decryption key generation 
required for decoding processing of code data which performed decoding of 
validation key blocks (EKB) and was stored in said recording medium. 
[Claim 16]A cipher-processing step which performs encryption processing of 
contents stored in a recording medium in an Information Storage Division method 
which records information to a recording mediumAn Information Storage Division 
method having a step which generates a digital signature of a record subject of 
said storing contentsand enciphered contenta digital signature and a step that 
matches an enciphered content record subject's public key certificationand is 
stored in a recording medium. 

[Claim 17]An Information Storage Division method according to claim 16 
performing processing which said Information Storage Division method generates 
further storing contentsa digital signatureand a management table that matched an 
address of a public key certificationand is stored in said recording medium. 
[Claim 18]An Information Storage Division method according to claim 16 said 
Information Storage Division method's making applicable to a signature further 
contents of enciphered content stored in said recording mediumand matching with 
storing contents a signature which performed and generated generation processing 
of a contents recording subject's digital signatureand storing it. 
[Claim 19]Said Information Storage Division method makes applicable to a 
signature a title key further set up corresponding to enciphered content stored in 
said recording mediumand generation processing of a contents recording subject's 
digital signature is performedAn Information Storage Division method according to 
claim 16 matching a generated signature with storing contents and storing it. 
[Claim 20]Said Information Storage Division method furtherDecoding of validation 
key blocks (EKB) is performed based on a node key peculiar to each node which 
constitutes hierarchy key tree structure which used as a leaf a different 
Information Storage Division device of plurality built in said Information Storage 
Division deviceand a leaf key peculiar to each Information Storage Division device. 
An Information Storage Division method according to claim 16 performing 
processing which acquires data for cryptographic key generation required for data 
encryption processing stored in said recording medium. 

[Claim 21 ]An information recording medium storing identification data of a record 
subject who is an information recording medium which stored enciphered 



contentand recorded this enciphered contentsaid record subject's public key 
certificationand said record subject's digital signature. 

[Claim 22]The information recording medium according to claim 21 wherein said 
information recording medium stores further storing contentsa digital signatureand 
a management table that matched an address of a public key certification. 
[Claim 23]It is the program storing medium which stored a computer program 
which makes information reproduction processing which reproduces information 
from a recording medium perform on computer systemsPublic key certification 
verification steps which perform verification processing of a public key 
certification of an enciphered content record subject by whom said computer 
program was stored in said recording mediumSaid contents recording subject's 
public key is acquired from a public key certification in which justification was 
checkedSignature verification steps which perform verification processing of a 
contents recording subject's digital signature based on an acquired this public 
keyA program storing medium having a step which performs decoding processing 
of enciphered content as a result of this signature verification on condition that 
the justification of a signature was checked. 

[Claim 24]It is the program storing medium which stored a computer program 
which makes the Information Storage Division processing which records 
information to a recording medium perform on computer systemsA cipher- 
processing step which performs encryption processing of contents which store 
said computer program in a recording mediumA program storing medium having a 
step which generates a digital signature of a record subject of said storing 
contentsand enciphered contenta digital signature and a step that matches an 
enciphered content record subject's public key certificationand is stored in a 
recording medium. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention An information reproducing devicethe 
Information Storage Division devicean information reproduction modethe 
Information Storage Division methodAnd about an information recording medium 
and a program storing mediumwhen the Information Storage Division device 
records data on an information recording medium especiallyan own digital signature 
and public key certification are recorded with dataWhen an information 
reproducing device reads datathe justification of the above-mentioned digital 
signature and a public key certification is checkedAfter checking RIBOKU [ the 
Information Storage Division device ]it is related with the information reproducing 
device considered as the composition which reads datathe Information Storage 
Divisior devicean information reproduction modethe Information Storage Division 
methodan information recording mediumand a program storing medium. 



[0002] 

[Description of the Prior Art]In recent yearsthe recorder and recording medium 
which record information in digital one are spreading with progress of digital signal 
processing technology and development. According to such a digital recording 
apparatus and a recording mediumrecord and reproduction can be repeatedwithout 
degrading a picture and a soundfor example. Thussince the digital data can carry 
out repeat execution of the copy repeatedlywith image quality or tone quality 
maintainedwhen the recording medium with which the copy was performed illegally 
will circulate in a commercial sceneprofitssuch as an owner of a copyright of 
various contentssuch as music and a movieor a just dealership personwill be 
injured. In these daysin order to prevent the unjust copy of such digital 
datavarious structure (system) for preventing an illegal copy is introduced into the 
digital recording apparatus and the recording medium. 

[0003]For examplein MD (mini disc) (MD is trademark) deviceSCMS (Serial Copy 
Management System) is adopted as a method of preventing an illegal copy. In 
[ SCMS outputs a SCMS signal to the data reproduction side from a digital 
interface (DIF) with audio informationand ] the Data Recording Sub-Division sidelt 
is a system which prevents an illegal copy by controlling record of the audio 
information from the reproduction side based on the SCMS signal from the 
reproduction side. 

[0004]A SCMS signal specifically. [ whether audio information is data of copy free 
(copy free) in which a copy is permitted any number of timesand ] It is a signal 
showing- whether it is data in which the copy is allowed only once (copy once 
allowedjor it is data in which the copy is forbidden (copy prohibited). If audio 
information is received from DIF to the Data Recording Sub-Division sidethe 
SCMS signal transmitted with the audio information will be detected. And when the 
SCMS signal serves as copy free (copy free)audio information is recorded on a 
mini disc with a SCMS signal. When the SCMS signal is permitted (copy once 
allowed) once about the copya SCMS signal is changed into copy prohibition 
(copyprohibited)and it records on a mini disc with audio information. Audio 
information is not recorded when the SCMS signal serves as copy prohibition 
(copy prohibited). By performing control which uses such SCMSthe audio 
information which has copyright prevents being copied illegally by SCMS with a 
mini disc device. 

[0005]Howeversince it is a premise that the apparatus itself which records data 
has the composition which controls record of the audio information from the 
reproduction side based on a SCMS signal as mentioned above as for SCMSWhen 
a mini disc device without the composition which performs control of SCMS is 
manufacturedit becomes difficult to cope with it. Thenfor examplewith the DVD 
playerit has the composition of preventing the illegal copy of data which has 
copyrightby adopting a contents scramble system. 

[0006]In a contents scramble systemto DVD-ROM (Read Only Memory). A video 
dataaudio informationetc. are enciphered and recorded and the key (decode key) 
used fo r decoding the enciphered data is given to the licensed DVD player. It is 



licensee to the DVD player designed follow predetermined regulation of not 
copying illegally of operation. Thereforein the licensed DVD playeran image and a 
sound are renewable from DVD-ROM by decoding the encryption data recorded on 
DVD-ROM using the given key. 

[0007]On the other handsince the DVD player which has not been licensed does 
not have a key for decoding the enciphered datait cannot decode the encryption 
data recorded on DVD-ROM. Thusin contents scramble system compositionthe 
DVD player which does not fulfill the conditions demanded at the time of a license 
can reproduce DVD-ROM which recorded digital dataand an illegal copy is 
prevented. 

[0008]Howeverthe contents scramble system adopted with DVD-ROM is aimed at 
the recording medium (suitably henceforth ROM media) which cannot write in the 
data by a user. 

It is not taken into consideration about application to the recording medium 
(suitably henceforth RAM media) which can write in the data by a user. 

[0009]That iseven if the data recorded on ROM media was encipheredwhen the 
enciphered data is all copied to RAM media as it waswhat is called a refreshable 
pirate edition will be able to be created with the licensed just device. 
[0010]Thenin previous patent application and JPH1 1-224461A (TokuganheMO- 
25310) these peopleRecord the information (it is hereafter described as medium 
identification information) for identifying each recording medium on a recording 
medium with other dataand on condition that it is the device which received the 
license of this medium identification information^ carries outOnly when the 
condition was fulfilledthe composition whose access to the medium identification 
information of a recording medium is attained was proposed. 

[001 1]The data on a recording medium is enciphered in this method by the secret 
key (master key) obtained by receiving medium identification information and a 
licenseMeaningful data cannot be obtained even if the device which has not been 
licensee reads this enciphered data. When a device is licensedthe operation is 
specified so that an unjust duplicate (illegal copy) may not be made. 
[0012]Since the device which has not been licensed cannot access medium 
identification information and medium identification information serves as an 
individual value for each medium of everyEven if the device which has not been 
licensed reproduces all the enciphered data that is recorded on the recording 
medium to a new recording mediumSince the data recorded on the recording 
medium created by making it such cannot be correctly decoded in the licensed 
device as well as the device which has not been licensedan illegal copy will be 
prevented substantially. 

[0013]By the wayas for the master key stored in the licensed devicein the above- 
mentioned compositionit is common in a complete aircraft machine that it is 
common. Thusit is because it is conditions required in order that storing a 
common master key to two or more apparatus may make refreshable the medium 
recorded by one apparatus by other apparatus (interoperability is secured). 



[0014]Howeverin this methodwhen an aggressor succeeds in the attack of one 
apparatus and takes out a master keythe data currently enciphered and recorded 
in all the systems can be decodedand the whole system collapses. In order to 
prevent thiswhen what a certain apparatus was attacked and the master key 
exposed is revealedit is necessary to give the master key which updated the 
master key to a new thing and was newly updated by complete aircraft machines 
other than the apparatus which yielded to the attack. Although the peculiar key 
(debye skiing) is given to each apparatus as a method simple No. 1 which realizes 
this compositionthe value which enciphered a new master key on each debye skis 
is prepared and the method transmitted to apparatus via a recording medium can 
be consideredThere is a problem that the total amount of messages which should 
be transmitted in proportion to the number of apparatus increases. 
[0015]As composition which solves the above-mentioned problemthese peopleVia 
a recorcing medium or a communication line using the key distribution method of 
composition of having arranged each Information Storage Division playback 
equipment to each wooden leaf (leaf) for n minutesWhen a key (a master key or a 
medium key) required for the record to the recording medium of contents data or 
the reproduction from a recording medium is distributed and each device is made 
to perform record of contents dataand reproduction using thisThe just (to device 
which the secret has not exposed) composition which receives and can transmit a 
master key or a medium key in the small amount of messages is proposed 
previouslyand patent application (Japanese Patent Application No. 2000-105328) 
has already been carried out. The key which is specifically needed in order to 
generate a key required for the record to a recording mediumor the reproduction 
from a recording mediumFor examplethe node key assigned to the node which 
constitutes each wooden leaf (leaf) for n minutes is set up as an updating node 
keyThe leaf key in which only just apparatus has an updating node keyand 
validation key blocks (EKB) including the information which carried out encryption 
processing in the mode which can decode by a node key are distributed to each 
Information Storage Division playback equipmentlt is the composition which made 
acquirable the key which each device needs for record or the reproduction from a 
recording medium by the EKB decoding processing of each Information Storage 
Division playback equipment which received validation key blocks (EKB). 
[0016] 

[Problem(s) to be Solved by the Invention]In the above-mentioned 
compositionalthough it is possible to eliminate from a system the device which the 
secret exposedit is necessary to specify whether for the purposeit was exposed of 
the secret of which device. For examplethe clone device which carries the secret 
of which a certain device was robbed is madeand if it can specify having been sold 
in the black marketthe device with which the secret was stolen will be specified 
and it will be eliminated from a system. 

[0017]By the wayconsidering the attack on a systema clone device is made as 
mentioned above and it does not appear on the marketThe act of selling the 
recording medium of converting a certain Information Storage Division devicefor 



examplerecording the data which should be enciphered essentially and should be 
recorded by a plaintext which made perform unjust record and was made as a 
result and containing the data recorded unjustly can be considered. In this caseif 
the device which recorded data on that recording medium unjustly can be 
specifiedit is possible by the above-mentioned method to distribute so that it may 
be eliminated from a system and new contents data may not be made to decode 
with that device. 

[0018]This invention solves an above-mentioned problem. 
The purpose records an own digital signature and public key certification with 
datawhen the Information Storage Division device records data on an information 
recording mediumWhen an information reproducing device reads dataafter checking 
the justification of the above-mentioned digital signature and a public key 
certiflcationby having composition which reads datait is providing the system 
which makes reproduction possible on condition that contents recording's is 
performed justly. 

[0019] 

[Means for Solving the Problemjln an information reproducing device with which 
the 1st side of this invention reproduces information from a recording 
mediumPerform verification processing of an enciphered content record subject's 
public key certification stored in said recording mediumand said contents recording 
subject's public key is acquired from a public key certification in which justification 
was checkedBased on an acquired this public keyverification processing of a 
contents recording subject's digital signature is performedand it is in an 
information reproducing device performing decoding processing of enciphered 
content on condition that the justification of a signature was checked as a result 
of this verification. 

[0020]An information reproducing device of this invention sets like 1 operative 
conditionand said cipher-processing meanslt is characterized by being the 
composition of performing verification processing of a contents recording subject's 
digital signature generated considering contents of enciphered content stored in 
said recording medium as a candidate for a signatureand performing decoding 
processing of enciphered content as a result of this verification on condition that 
the justification of a signature was checked. 

[0021 ]An information reproducing device of this invention sets like 1 operative 
conditionand said cipher-processing meansVerification processing of a contents 
recording subject's digital signature generated considering a title key set up 
corresponding to enciphered content stored in said recording medium as a 
candidate for a signature is performedlt is characterized by being the composition 
of performing decoding processing of enciphered content on condition that the 
justification of a signature was checked as a result of this verification. 
[0022]An information reproducing device of this invention sets like 1 operative 
conditionand said information reproducing deviceHold a node key peculiar to each 
node which constitutes hierarchy key tree structure which used several different 



information reproducing devices as a leafand a leaf key peculiar to each 
information reproducing deviceand said cipher-processing meansDecoding of 
validation key blocks (EKB) which consist of encryption processed data of a higher 
rank key by a low rank key on a path of a key tree based on a key built in said 
information reproducing device is performed. It has the composition which acquires 
data for decryption key generation required for decoding processing of code data 
stored in said recording medium. 

[0023]An information reproducing device of this invention sets like 1 operative 
conditionand said data for decryption key generation is characterized by being a 
medium key peculiar to a common master key or a recording medium in two or 
more information reproducing devices. 

[0024]In the Information Storage Division device with which the 2nd side of this 
invention records information to a recording mediumHave a cipher-processing 
means to perform encryption processing of contents stored in a recording 
mediumand this cipher-processing meansA digital signature of a record subject of 
said storing contents is generatedand it is in enciphered contenta digital 
signatu r eand the Information Storage Division device having the composition which 
performs processing which matches an enciphered content record subject's public 
key certificationand is stored in a recording medium. 

[0025]The Information Storage Division device of this invention sets like 1 
operative conditionsaid Information Storage Division device generates storing 
contentsa digital signatureand a management table that matched an address of a 
public key certificationand it has the composition which performs processing 
stored in said recording medium. 

[0026]The Information Storage Division device of this invention sets like 1 
operative conditionand said cipher-processing meanslt is characterized by being 
the composition of performing generation processing of a contents recording 
subject's digital signature by making applicable to a signature contents of 
enciphered content stored in said recording mediummatching a generated 
signatu r e with storing contents and storing it. 

[0027]The Information Storage Division device of this invention sets like 1 
operative conditionand said cipher-processing meanslt is characterized by being 
the composition of performing generation processing of a contents recording 
subject's digital signature by making applicable to a signature a title key set up 
corresponding to enciphered content stored in said recording mediummatching a 
generated signature with storing contents and storing it. 
[0028]The Information Storage Division device of this invention sets like 1 
operative conditionand said Information Storage Division deviceHold a node key 
peculiar to each node which constitutes hierarchy key tree structure which used 
several different Information Storage Division devices as a leafand a leaf key 
peculiar to each Information Storage Division deviceand said cipher-processing 
meansDecoding of validation key blocks (EKB) which consist of encryption 
processed data of a higher rank key by a low rank key on a path of a key tree 
based on a key built in said Information Storage Division device is performed. It 



has the composition which acquires data for cryptographic key generation required 
for data encryption processing stored in said recording medium. 
[0029]The Information Storage Division device of this invention sets like 1 
operative conditionand said data for cryptographic key generation is characterized 
by being a medium key peculiar to a common master key or a recording medium in 
two or more Information Storage Division devices. 

[0030]In an information reproduction mode with which the 3rd side of this 
invention reproduces information from a recording mediumPublic key certification 
verification steps which perform verification processing of an enciphered content 
record subject's public key certification stored in said recording mediumSaid 
contents recording subject's public key is acquired from a public key certification 
in which justification was checkedSignature verification steps which perform 
verification processing of a contents recording subject's digital signature based on 
an acquired this public keylt is in an information reproduction mode having a step 
which performs decoding processing of enciphered content on condition that the 
justification of a signature was checked as a result of this signature verification. 
[0031]Said signature verification steps [ in / an information reproduction mode of 
this invention sets like 1 operative conditionand / said information reproduction 
mode ]A step which performs verification processing of a contents recording 
subject's digital signature generated considering contents of enciphered content 
stored in said recording medium as a candidate for a signature is includedAs a 
result of this verificationon condition that the justification of a signature was 
checkeddecoding processing of enciphered content is performed. 
[0032]Said signature verification steps [ in / an information reproduction mode of 
this invention sets like 1 operative conditionand / said information reproduction 
mode ]A step which performs verification processing of a contents recording 
subject's digital signature generated considering a title key set up corresponding 
to enciphered content stored in said recording medium as a candidate for a 
signature is includedAs a result of this verificationon condition that the 
justification of a signature was checkeddecoding processing of enciphered content 
is performed. 

[0033]An information reproduction mode of this invention sets like 1 operative 
conditionand said information reproduction modeBased on a node key peculiar to 
each node which constitutes hierarchy key tree structure which used several 
different information reproducing devices as a leafand a leaf key peculiar to each 
information reproducing deviceProcessing which acquires data for decryption key 
generation required for decoding processing of code data which performed 
decoding of validation key blocks (EKB) and was stored in said recording medium 
is performed. 

[0034]In an Information Storage Division method that the 4th side of this invention 
records information to a recording mediumA cipher-processing step which 
performs encryption processing of contents stored in a recording mediumlt is in an 
Information Storage Division method having a step which generates a digital 
signature of a record subject of said storing contentsand enciphered contenta 



digital signature and a step that matches an enciphered content record subject's 
public key certificationand is stored in a recording medium. 
[0035]An Information Storage Division method of this invention sets like 1 
operative conditionsaid Information Storage Division method generates further 
storing contentsa digital signatureand a management table that matched an 
address of a public key certificationand processing stored in said recording 
medium is performed. 

[0036]An Information Storage Division method of this invention sets like 1 
operative conditionand said Information Storage Division methodGeneration 
processing of a contents recording subject's digital signature is performed by 
making applicable to a signature contents of enciphered content stored in said 
recording mediumand a generated signature is matched with storing contents and 
stored. 

[0037]An Information Storage Division method of this invention sets like 1 
operative conditionand said Information Storage Division methodGeneration 
processing of a contents recording subject's digital signature is performed by 
making applicable to a signature a title key set up corresponding to enciphered 
content stored in said recording mediumand a generated signature is matched with 
storing contents and stored. 

[0038]An Information Storage Division method of this invention sets like 1 
operative conditionand said Information Storage Division 

method FurthermoreDecoding of validation key blocks (EKB) is performed based on 
a node key peculiar to each node which constitutes hierarchy key tree structure 
which used as a leaf a different Information Storage Division device of plurality 
built in said Information Storage Division deviceand a leaf key peculiar to each 
Information Storage Division device. Processing which acquires data for 
cryptographic key generation required for data encryption processing stored in 
said recording medium is performed. 

[0039]The 5th side of this invention is the information recording medium which 
stored enciphered contentand is in an information recording medium storing 
identification data of a record subject who recorded this enciphered contentsaid 
record subject's public key certificationand said record subject's digital signature. 
[0040]An information recording medium of this invention set like 1 operative 
conditionand said information recording medium stored further storing contentsa 
digital signatureand a management table that matched an address of a public key 
certification. 

[0041 ]The 6th side of this invention is the program storing medium which stored a 
computer program which makes information reproduction processing which 
reproduces information from a recording medium perform on computer 
systemsPublic key certification verification steps which perform verification 
processing of a public key certification of an enciphered content record subject by 
whom said computer program was stored in said recording mediumSaid contents 
recording subject's public key is acquired from a public key certification in which 
justification was checkedSignature verification steps which perform verification 



processing of a contents recording subject's digital signature based on an acquired 
this public keylt is in a program storing medium having a step which performs 
decoding processing of enciphered content on condition that the justification of a 
signature was checked as a result of this signature verification. 
[0042]The 7th side of this invention is the program storing medium which stored a 
computer program which makes the Information Storage Division processing which 
records information to a recording medium perform on computer systemsA cipher- 
processing step which performs encryption processing of contents which store 
said computer program in a recording mediumlt is in a program storing medium 
having a step which generates a digital signature of a record subject of said 
storing contentsand enciphered contenta digital signature and a step that matches 
an enciphered content record subject's public key certificationand is stored in a 
recording medium. 
[0043] 

[Function]In this inventionwhen the Information Storage Division device recorded 
data on an information recording mediuman own digital signature and public key 
certification were recorded with data. Since he is trying to also certainly record 
with data proof which recorder recordedby this when recording informationSince it 
can specify which recorder recorded it even if the recording medium containing 
the data recorded unjustly circulatedexclusion from a system can be performed. 
[0044]When an information reproducing device reads dataafter checking the 
justification of the above-mentioned digital signature and a public key 
certificationit had composition which reads data. By thisthe inaccurate recorder is 
delivering the powerless thing an attack which does not record a digital signature 
to inaccurate record data. That isit is because just playback equipment will not 
reproduce the data if there is no effective digital signature to the recorded data. 
[0045] 

[Embodiment of the Invention][System configuration] Drawing 1 is a block diagram 
showing one working example composition of the recording and reproducing device 
100 which applied this invention. The recording and reproducing device 100Input- 
and-output I/F. 120 (Interface) MPEG (Moving.) Input-and-output I/F(Interface) 

140 [ provided with the Picture Experts Group codec 130A/Dand D/A converter 

141 ]the cipher-processing means 150ROM(Read Only Memory) 160CPU (Central.) 
Processing Unit170the memory 180and the recording-medium interface (I/F) 190 
of the recording medium 200 — it has the transport stream processing means (TS 
processing means) 300 furtherand these are mutually connected by bus 110. 
[0046]Irput-and-output I/F120 receives the digital signal on the bus 1 10and 
outputs it outside while it receives the digital signal which constitutes various 
contents supplied from the outsidesuch as a picturea soundand a programand 
outputs it on the bus 110. The MPEG codec 130 carries out MPEG encoding of 
the digital signal supplied from input-and-output I/F140and outputs it on the bus 
110 while it carries out MPEG decoding of the data which is supplied via the bus 
110 and by which MPEG coding was carried out and outputs it to input-and- 
output I/F140. Input-and-output I/F140 builds in A/D and D/A converter 141. It is 



input-and-output I/F140 receiving the analog signal as contents supplied from the 
outsideand carrying out A/D (Analog Digital) conversion by A/D and D/A 
convert er 141 As a digital signalwhile outputting to the MPEG codec 130the digital 
signal from the MPEG codec 130 is outputted outside as an analog signal by 
carrying out D/A (Digital Analog) conversion by A/D and D/A converter 141. 
[0047]For example the cipher-processing means 150 comprises LSI (Large Scale 
IntegratedCurcuit) of one chipenciphers or decodes the digital signal as contents 
supplied via the bus 1 10and has the composition outputted on the bus 1 10. Not 
only 1 chip LSI but the thing which the composition which combined various kinds 
of software or hardwares realizes is possible for the cipher-processing means 150. 
The latcer part explains the composition as a processing means by a software 
configuration. 

[0048]ROM160 has memorized the leaf key which is peculiar debye skiingand the 
node key which are two or more recording and reproducing devices or debye skiing 
shared in two or more groups for every recording and reproducing device for every 
group of two or more peculiar or recording and reproducing devicesfor example. 
The secret key of a public-key-encryption system peculiar to a recording and 
reproducing device and the public key of the public key certification and the 
further reliable center are memorized. 

[0049]Herethe center (certificate authority) which a public key certification stores 
the certificate user'sfor examplelD of a recording and reproducing device and a 
userpublic key as shown in drawing 2 and can trust other data as a message is the 
data which gave the digital signature. Verification processing of the digital 
signature of a center can be performed using the public key of an acquired center 
beforehandthe justification of a public key certification can be checkedand the 
stored public key can be taken out and used. 

[0050]CPU170 is executing the program memorized by the memory 180and 
controls the MPEG codec 130 and cipher-processing means 150 grade. The 
memory 180 is nonvolatile memory and memorizes required data on the program 
which GPU170 executesand operation of CPU170for example. While the recording- 
medium interface 190 reads digital data from the recording medium 200 
(reproducing) and outputs it on the bus 1 10 by driving the recording medium 200 in 
which record reproduction is possible for digital dataThe digital data supplied via 
the bus 1 10 is supplied to the recording medium 200and is made to record. It is 
good also as composition which memorizes a program to ROM160 and memorizes 
debye skiing etc. in the memory 180. 

[0051 ]The recording medium 200 is a medium which can memorize digital datasuch 
as semiconductor memorysuch as optical discssuch as DVD and CDa magneto- 
optical disca magnetic diskmagnetic tapeor RAMfor example. 
According to this embodimentsuppose that it is removable composition to the 
recording-medium interface 190. 

Howeverthe recording medium 200 is good also as composition built in the 
recording and reproducing device 100. 

[0052]Although the transport stream processing means (TS processing means) 



300 is explained in detail using figures in the latter partFor examplethe transport 
packet corresponding to a specific program (contents) is taken out from the 
transport stream which two or more TV programs (contents) multiplexedData 
processing for storing the appearance timing information of the taken-out 
transport stream in the recording medium 200 with each packet and appearance 
timing-control processing at the time of the regeneration from the recording 
medium 200 are performed. 

[0053]ATS (Arrival Time Stamp: mail arrival time stamp) as appearance timing 
information of each transport packet is set to the transport stream. 
It is determined at the time of coding that this timing will not ruin T-STD 
(Transport stream System Target Decoder) which is the virtual decoder specified 
with MPEG 2 systemsand at the time of reproduction of a transport stream. 
Appearance timing is controlled by ATS added to each transport packet. 
The transport stream processing means (TS processing means) 300 performs 
these control. For examplein recording a transport packet on a recording 
mediumrecord as a source packet which packed the interval of each packetbut. By 
saving the appearance timing of each transport packet collectively at a recording 
mediumit becomes possible to control the output timing of each packet at the time 
of reproduction. The transport stream processing means (TS processing means) 
300 adds and records ATS (ArrivalTime Stamp: mail arrival time stamp) showing 
the input timing of each transport packet at the time of Data Recording Sub- 
Division to the recording media 200such as DVD. 

[0054]The data processed in the processing system of this invention is not 
restricted to the format data according to a transport stream. Thereforewhen 
performing processing about data other than a transport streamit is not 
necessarily necessary for TS processing means shown in drawing 1 . 
[0055][The Data Recording Sub-Division processing and data reproduction 
processing] Nextthe Data Recording Sub-Division processing and the data 
reproduction processing from a recording medium to the recording medium in the 
recording and reproducing device of drawing 1 are explained with reference to the 
flow chart of drawing 3 and drawing 4 . When recording the contents of the digital 
signal from the outside on the recording medium 200recording processing 
according to the flow chart of drawing 3 (A) is performed. Namelythe contents 
(digital contents) of a digital signal. For examplevia IEEEOnstitute of Electrical and 
Electronics Engineers) 1394 serial bus etc.If input-and-output I/F120 is suppliedin 
Step S1 1 input-and-output I/F120 will receive the digital contents suppliedand will 
output them to TS processing means 300 or the cipher-processing means 150 via 
the bus 110. 

[0056]When received data need transport stream processingtransport stream 
processing is performed in TS processing means 300. In Step S12TS processing 
means 300 generates the block data which added ATS to each transport packet 
which constitutes a transport streamand outputs it to the cipher-processing 
means 150 via the bus 110. This processing is explained still in detail in the latter 
part. 



[0057]In Step S13the cipher-processing means 150 performs encryption 
processing to the digital contents which receivedand outputs the enciphered 
content obtained as a result to recording-medium I/F190 via the bus 1 10. 
Enciphered content is recorded on the recording medium 200 via recording- 
medium I/F190 (S14)and ends recording processing. 
[0058]Between [ connected via the IEEE1394 serial bus ] devicesBy five 
companies which include Sony Corp. which is this Applicant as a standard for 
protecting digital contents when transmitting digital contents. Although 5CDTCP 
(Five Company Digital Transmission Content Protection) (suitably henceforth 
DTCP) is definedWhen the digital contents which are not free as for a copy are 
transmitted between devices in this DTCPIn [ attest mutually whether in advance 
of data communicationsthe transmitting side and a receiver can deal with the copy 
control information for controlling a copy correctlyand ] after that and the 
transmitting sideDigital contents are enciphered and transmitted and the 
enciphered digital contents (enciphered content) are decoded in a receiver. 
[0059]In the data transmission and reception based on a standard to this 
DTCPIrput-and-output I/F120 of a data receiving side is Step S1 lit receives 
enciphered content via an IEEE1394 serial busdecodes the enciphered content to 
DTCP based on a standardand outputs it to the cipher-processing means 150 
after that as contents of a plaintext. 

[0060]The key which carries out a temporal change is generated and encryption of 
the digital contents by DTCP is performed using the key. The enciphered digital 
contents are transmitted in IEEE1394 serial bus tops including the key used for 
the encryptionand decode the enciphered digital contents in a receiver using the 
key contained there. 

[0061]According to DTCPthe initial value of a key and the flag showing the 
changing timing of a key used for encryption of digital contents are correctly 
included in enciphered content. And at a receiverby changing too the initial value 
of the key contained in the enciphered content in the timing of the flag contained 
in the enciphered contentthe key used for encryption is generated and enciphered 
content is decoded. Howeverif the key for performing the decoding to enciphered 
content is containedeven if it will think that it is equivalentin order not to 
interferebelowit shall think such here. In the Web page specified by URL (Uniform 
Resource Locator) of http://www.dtcp.com about DTCP herefor 
exampleAcquisition of an informational version (Informational Version) is possible. 
[0062]Mextthe contents of the analog signal from the outside are explained about 
the processing in the case of recording on the recording medium 200 according to 
the flow chart of drawing 3 (B). When the contents (analog content) of an analog 
signal are supplied to input-and-output I/F140input-and-output I/F140In Step 
S21the analog content is receivedan A/D conversion is carried out by A/D and 
D/A converter 141 which are followed and built in Step S22and it is considered as 
the contents (digital contents) of a digital signal. 

[0063]These digital contents are supplied to the MPEG codec 130and in Step 
S23cod ng processing by MPEG encodingi.e.MPEG compressionis performedand 



they are supplied to the cipher-processing means 150 via the bus 110. 
[0064]Hereafterin Step S24S25and S26processing in Step S12 of drawing 3 
(A)S13and S14 and same processing are performed. That isif requiredATS addition 
to the transport packet by TS processing means 300 and encryption processing in 
the cipher-processing means 150 will be performedthe enciphered content 
obtained as a result is recorded on the recording medium 200and recording 
process ing is ended. 

[0065]Nextthe contents recorded on the recording medium 200 are reproducedand 
the processing outputted as digital contents or analog content is explained 
according to the flow of drawing 4 . Processing outputted outside as digital 
contents is performed as regeneration according to the flow chart of drawing 4 (A). 
That isfirstin Step S31the enciphered content recorded on the recording medium 
200 is read by recording-medium I/F190and it is outputted to the cipher- 
processing means 150 via the bus 110. 

[0066]In the cipher-processing means 150decoding processing of the enciphered 
content supplied from recording-medium I/F190 is carried out in Step S32and 
when data is a transport streamDecode data is outputted to TS processing means 
300 via the bus 110and when TS processing is unnecessaryinput-and-output 
I/F120 s supplied. 

[0067]In Step S43TS processing means 300 judges output timing from ATS of 
each transport packet which constitutes a transport streamperforms control 
according to ATSand supplies it to input-and-output I/F120 via the bus 110. 
Input-and-output I/F120 outputs the digital contents from TS processing means 
300 outsideand ends regeneration. The decoding processing of the digital contents 
in processing of TS processing means 300 and the cipher-processing means 150 is 
mentioned later. 

[0068]Data is supplied to input-and-output I/F120and in Step S34input-and- 
output I/F120 outputs digital contents outsideand ends regeneration. 
[0069]Input-and-output I/F120 is Step S34based on the standard of DTCPwhen 
outputting digital contents via an IEEE1394 serial busas mentioned aboveattests 
mutually between a partner's devicesand enciphers and transmits digital contents 
after that. 

[0070]When reproducing the contents recorded on the recording medium 200 and 
outputting outside as analog contentregeneration according to the flow chart of 
drawing 4 (B) is performed. 

[0071]Namelyin Step S41S42and S43the respectively same processing as the 
case in Step S31 of drawing 4 (A)S32and S33 is performedand by thisThe decoded 
digital contents which were obtained in the cipher-processing means 150 are 
supplied to the MPEG codec 130 via the bus 110. 
[0072]In the MPEG codec 130in Step S44MPEG decodingi.e.elongation 
processingis executed and digital contents are supplied to input-and-output 
I/F140. In Step S44D/A conversion (S45) of the digital contents by which MPEG 
decoding was carried out by the MPEG codec 130 is carried out by A/D and D/A 
converter 141 to build inand input-and-output I/F140 makes them analog content. 



And it progresses to Step S46and input-and-output I/F140 outputs the analog 
content outsideand ends regeneration. 

[0073][Transport stream] Nextthe data format on the recording medium in the 
case of processing transport stream data is explained using drawing 5 . The 
minimum unit of reading and writing of the data on a recording medium is called by 
the name of the block (block). 1 block has 192*X (X) byte's (for exampleX= 32) 
size. 

[0074]For exampleATS is added to TS (transport stream) packet (188 bytes) of 
MPEG 2and as 192 bytesX of them are collected and it is considered as 1 -block 
data. ATS is data in which 24 thru/or 32-bit mail arrival time is shownand is the 
abbreviation for Arrival Time Stamp (mail arrival time stamp). ATS is constituted 
as data with the random nature according to the mail arrival time of each packet. 
X individual record of the TS (transport stream) packet which added ATS to one 
block (sector) of a recording medium is carried out. In the composition of this 
inventicnthe block key which enciphers the data of the block (sector) using ATS 
added to the 1st TS packet of each block which constitutes a transport stream is 
generated. 

[0075]Ey generating the block key for encryption using ATS with random naturea 
different inherent key for every block is generated. Encryption processing for 
every block is performed using the generated block inherent key. By having 
composition which generates a block key using ATSthe field on the recording 
medium for storing the enciphering key for every block becomes unnecessaryand a 
main data area becomes usable effectively. It becomes unnecessary to access any 
data other than a main data division at the time of record of dataand 
reproductionand processing becomes efficient. 

[0076]Elock seed (Block Seed) shown in drawing 5 is the additional information 
containing ATS. The composition which copy limit information (CCI:Copy Control 
Information) also adds as further shown not only in ATS but in the figure middle is 
possible for block seed. In this caseit can have composition which generates a 
block key using ATS and CCI. 

[0077]In the composition of this inventionwhen it stores data on recording 
mediasuch as DVDthe data of most contents is encipheredbut. As shown in the 
bottom of drawing 5 m (for examplem= 8 or 16) byte of the head of a block is 
recorded with a plaintext (Unencrypted data)without being encipheredand the 
remaining data (m+1 byte or subsequent ones) is enciphered. This is for 
restrictions to occur in cipher-processing data length (Encrypted data)since 
cipher processing is processing as an 8-byte unit. If cipher processing can carry 
out for example not per 8-byte unit but per byteall portions other than block seed 
may be enciphered as m= 4. 

[0078][Processing in TS processing means] Herethe function of ATS is explained 
in detail. ATS is a mail arrival time stamp added since the appearance timing of 
each transport packet in an input transport stream is saved as explained also in 
advance. 

[0079]Namelywhen one or some TV programs (contents) are taken out out of the 



transport stream which two or more TV programs (contents) multiplexedfor 
exampleThe transport packet which constitutes the taken-out transport stream 
appears at an irregular interval (refer to drawing 7 (a)). A transport stream has a 
meaning important for the appearance timing of each transport packetlt is 
determined at the time of coding that this timing will not ruin T-STD (Transport 
stream System Target Decoder) which is the virtual decoder specified with MPEG 
2 systems (ISO/IEC 13818-1). 

[0080]Appearance timing is controlled by ATS added to each transport packet at 
the time of reproduction of a transport stream. Thereforein recording a transport 
packet on a recording medium. When it is necessary to save the input timing of a 
transport packet and a transport packet is recorded on recording mediasuch as 
DVDATS showing the input timing of each transport packet is added and recorded. 
[0081]The block diagram explaining the processing which performs the transport 
stream inputted via a digital interface in TS processing means 300 when recording 
on the storage medium which are recording mediasuch as DVDis shown in drawing 
6. From the terminal 600a transport stream is inputted as digital datasuch as 
digital broadcasting. In drawing 1 a transport stream is inputted from the terminal 
600 via input-and-output I/F140 and the MPEG codec 130 via input-and-output 
I/F120. 

[0082]A transport stream is inputted into the bit stream purser (parser) 602. The 
bit stream purser 602 detects an PCR (Program Clock Reference) packet out of 
an input transport stream. Herean PCR packet is a packet by which PCR specified 
with MPEG 2 systems is coded. The PCR packet is coded with the time interval of 
less than 100 msec. PCR expresses with the accuracy of 27 MHz the time when a 
transport packet reaches a receiver. 

[0083]And PCR of a transport stream is made to carry out lock (Lock) of the 27 
MHz clocks which a record reproducer has in 27MHzPLL603. The time stamp 
generation circuit 604 generates the time stamp based on the counted value of 
the clock of 27 MHz clocks. And the block seed (Block seed) additional circuit 605 
is added to the transport packet by setting a time stamp in case the 1st byte of a 
transport packet is inputted into the smoothing buffer 606 to ATS. 
[0084]The transport packet to which ATS was addedlt passes along the smoothing 
buffer 606and after cipher processing which it is outputted to the cipher- 
processing means 150and is explained in the latter part from the terminal 607 is 
performedit is recorded on the recording medium 200 which is a storage medium 
via recording-medium I/F210 ( drawing 1 ). 

[0085]D rawing 7 shows the example of processing in case an input transport 
stream is recorded on a recording medium. Drawing 7 (a) shows the input of the 
transport packet which constitutes a certain specific program (contents). A 
horizontal axis is a time-axis which shows the time on a stream here. In this 
examplethe input of a transport packet appears to irregular timingas shown in 
drawing 7 (a). 

[0086]D rawing 7 (b) shows the output of the block seed (Block Seed) additional 
circuit 605. The block seed (Block Seed) additional circuit 605 adds the block seed 



(Block Seed) containing ATS which shows the time on the stream of the packet 
for every transport packetand outputs a source packet. Drawing 7 (c) shows the 
source packet recorded on the recording medium. As shown in drawing 7 (c)a 
source packet packs an interval and is recorded on a recording medium. Thusthe 
record section of a recording medium can be effectively used by packing and 
recording an interval. 

[0087]D rawing 8 shows the processing constitution block diagram of TS 
processing means 300 in the case of reproducing the transport stream recorded 
on the recording medium 200. The transport packet with ATS decoded in a cipher- 
processing means to explain in the latter part is inputted into the block seed 
(Block seed) separation circuits 801 and ATS and a transport packet are separated 
from the terminal 800. The timing generating circuit 804 calculates the time based 
on the clock counter value of 27 MHz clocks 805 which a regenerator has. 
[0088]Very first ATS is set to the timing generating circuit 804 as an initial value 
at the t me of a reproductive start. The comparator 803 compares the present 
time inputted from ATS and the timing generating circuit 804. And when time for 
the timing generating circuit 804 to occur and ATS become equalthe output 
controlling circuit 802 outputs the transport packet to the MPEG codec 130 or 
digital-input/output I/F120. 

[0089] Drawing 9 carries out MPEG encoding of the input AV signal in the MPEG 
codec 130 of the record reproducer 100and shows the composition which codes a 
transport stream in TS processing means 300 further. Therefore drawing 9 is a 
block diagram showing both the processing constitution of the MPEG codec 130 
and TS processing means 300 in drawing 1 collectively. The video signal is 
inputted from the terminal 901 and it is inputted into MPEG video encoder 902. 
[0090]MPEG video encoder 902 codes an input video signal to an MPEG video 
streamand outputs it to the buffer video stream buffer 903. MPEG video encoder 
902 outputs the access unit information about an MPEG video stream to the 
multiplexing scheduler 908. The access unit of a video stream is a picture and 
access unit information is a picture type of each picturean encoding bit amountand 
a decooingtime stamp. Herea picture type is the information on I/P/B picture 
(picture). A decoding time stamp is information specified with MPEG 2 systems. 
[0091 ]The audio signal is inputted from the terminal 904 and it is inputted into 
MPEG audio encoder 905. MPEG audio encoder 905 codes an input audio signal to 
an MPEG audio streamand outputs it to the buffer 906. MPEG audio encoder 905 
outputs the access unit information about an MPEG audio stream to the 
multiplexing scheduler 908. The access unit of an audio stream is an audio 
frameand access unit information is an encoding bit amount of each audio 
frameand a decoding time stamp. 

[0092]The access unit information of video and an audio is inputted into the 
multiplexing scheduler 908. The multiplexing scheduler 908 controls the method of 
coding a video stream and an audio stream to a transport packet based on access 
unit information. As the multiplexing scheduler 908 has a clock which generates 
the reference time of 27-MHz accuracy in an inside and fills T-STD which is the 



virtual decoder model specified by MPEG 2it determines the packet encoding 
control information of a transport packet. Packet encoding control information is 
the kind of stream and the length of a stream which are packet-ized. 
[0093]When packet encoding control information is a video packetit is on the a 
sidethe video data of payload-data length directed by packet encoding control 
information is read from the video stream buffer 903and the switch 976 is inputted 
into the transport packet coding equipment 909. 

[0094]When packet encoding control information is an audio packetit is on the b 
sidethe audio information of payload-data length directed from the audio stream 
buffer 906 is readand the switch 976 is inputted into the transport packet coding 
equipment 909. 

[0095]When packet encoding control information is an PGR packetthe transport 
packet coding equipment 909 incorporates PCR inputted from the multiplexing 
scheduler 908and outputs an PCR packet. Nothing is inputted into the transport 
packet coding equipment 909 when directing that packet encoding control 
information does not code a packet. 

[0096]The transport packet coding equipment 909 does not output a transport 
packetwhen directing that packet encoding control information does not code a 
packet. When othera transport packet is generated and outputted based on packet 
encodirg control information. Thereforethe transport packet coding equipment 909 
outputs a transport packet intermittently. The arrival (Arrival) time stamp (time 
stamp) calculating means 910 calculates ATS which shows the time when the 1st 
byte of a transport packet reaches a receiver based on PCR inputted from the 
multiplexing scheduler 908. 

[0097]Since PCR inputted from the multiplexing scheduler 908 shows the arrival 
time to the 10th byte of receiver of the transport packet specified by MPEG 2the 
value of ATS serves as time when the byte 10 bytes before the time of PCR 
arrives. 

[0098]The block seed (Block Seed) additional circuit 91 1 adds ATS to the 
transport packet outputted from the transport packet coding equipment 909. The 
transport packet with ATS outputted from the block seed (Block seed) additional 
circuit 911 It passes along the smoothing buffer 912a cipher-processing means 150 
HE input is carried outand it is stored in the recording medium 200 which is a 
storage medium after cipher processing explained in the latter part is performed. 
[0099]Before being enciphered by the cipher-processing means 150the transport 
packet with ATS stored in the recording medium 200 is inputted where an interval 
is packedas shown in drawing 7 (c)and it is stored in the recording medium 200 
after that. Even if a transport packet packs an interval and is recordedthe input 
time to the receiver of the transport packet is controllable by referring to ATS. 
[0100]By the waythe size of ATS was not necessarily decided as 32 bitsand 24 
bits thru/or 31 bits of it may be sufficient. The cycle around which the time 
counter of ATS goes becomes longso that the bit length of ATS is long. For 
examplewhen ATS is a binary counter of 27-MHz accuracytime for ATS of 24-bit 
length to go around is about 0.6 second. This time interval is size sufficient in a 



general transport stream. It is because the packet interval of the transport stream 
is decided to be a maximum of 0.1 second by regulation of MPEG 2. 
Howeversufficient margin is seen and it is good as for more than 24-bit in ATS. 
[0101]Thuswhen bit length of ATS is made into various lengthsome composition is 
attained as composition of the block seed who is attached data of block data. 
Block seed's example of composition is shown in drawing 10 . Example 1 of drawing 
10 is an example which uses ATS by 32 bits. Example 2 of drawing 10 is an 
example which makes ATS 30 bits and uses copy control information (CCI) by 2 
bits. Copy control information is information showing the state of copy-of-data 
control where it was added. 

SCMS:Serial Copy Management System and CGMS:Copy Generation Management 
System are famous. 

Copy free (Copy Free) which shows that the copy is permitted without restriction 
in such copy control information as for the data in which the information was 
addedln-ormationincluding the copy prohibition (Copy Prohibited) etc. which do not 
accept the one-generation copy permission (One Generation Copy Allowed) which 
permits the copy of only one generationand a copycan be expressed. 
[0102]Example 3 shown in drawing 10 is an example which makes ATS 24 bitsuses 
2 bits of CCI(s)and uses 6 bits of information of further others. As other 
informationwhen the analog output of this data is carried outfor exampleit is 
possible to use various informationincluding information etc.which shows ON and 
OFF (On/Off) of the macro vision (Macrovision) which is a copy control 
mechanism of an analog video data. 

[0103][Tree (Thurs.) structure as key distribution composition] Nextthe 
composition which distributes the key which needs it when the recording and 
reproducing device shown in drawing 1 reproduces data from record or a recording 
medium to a recording mediumfor examplea medium keyto each apparatus is 
explained. Drawing 1 1 is a figure showing the distribution composition of the key of 
the recording and reproducing device in the recording system which used this 
method. The numbers 0-15 shown in the bottom of drawing 1 1 are each recording 
and reproducing devices. That iseach leaf (leaf: leaf) of the tree (tree) structure 
shown in drawing 1 1 is equivalent to each recording and reproducing device. 
[0104]Each devices 0-15 store in person the key (node key) assigned to the node 
of a to [ from its own leaf in the initial tree defined beforehand / a route ]and the 
leaf key of each leaf at the time of manufacture (at the time of shipment). K0000- 
K1 1 1 1 which are shown in the bottom of drawing 1 1 are the leaf key assigned to 
each devices 0-1 5respectivelyand let key:KR-K1 1 1 indicated in the 2nd paragraph 
(node) from the bottom be a node key from KR of the highest rung. 
[0105]In the tree composition shown in drawing 1 1t he device 0 owns the leaf key 
KOOOOnode key:K000 and KOOKOand KR. The device 5K0101K010K01K0and KR are 
owned. The device 1 5 owns K1 1 1 1 K1 1 1 K1 1 K1 and KR. Although 1 6 devices of 0-1 5 
are indicated to the tree of drawing 1 1 and the tree structure is also shown as 
symmetrical composition which was able to take balance of 4 stage constitutionit 
is possible to have number-of-stages composition which much more devices are 



constituted in a treeand is different in each part of a tree. 

[0106]The record reproducer various type which uses various recording mediafor 
exampleDVDCDMDa memory stick (trademark)etc. is contained in each record 
reproducer contained in the tree structure of drawing 1 1 . It is assumed that 
various application services live together. The key distribution composition shown 
in drawing 1 1 after such a different device and different application constitute 
[ coexistence ] is applied. 

[01 07]Ir the system by which these various devices and application live 
togetherthe portion 012and 3 enclosed with the dotted line of drawing 
IJj.e.devicesis set up as one group using the same recording medium. For 
examplethe device contained in the group enclosed with this dotted line is 
receivedlt collectsand common contents are enciphered and processing in which 
send the master key which is sent from a provider or is used in commonor 
encipher to a provider or a settlement-of-accounts organization tooand the 
payment data of a content rate is outputted to it from each device is performed. 
Organizations which perform data transmission and reception with each 
devicesuch as a content provider or a settlement processing organizationperform 
the portion enclosed with the dotted line of drawing 1 l i.e.the processing which 
bundle up the devices 012and 3 as one groupand sends data. Two or more such 
groups exist in the tree of drawing 1 1 . 

[0108]A node key and a leaf key are good also as composition managed for every 
group with the provider who may generalize and manage by one certain lock 
management centerand performs various data transmission and reception to each 
groupa settlement-of-accounts organizationetc. As for these node keys and a leaf 
keyin disclosure of a keyetc.an update process is performedand a lock 
management centera providera settlement-of-accounts organizationetc. perform 
this update process. 

[01 09]In this tree structurethe three devices 012and 3 contained in one group 
hold the key K00 common as a node keyKOand KR so that clearly from drawing 1 1 . 
By using this node key share compositionit becomes possible to provide only the 
devices 012and 3 with a common master keyfor example. For exampleif node key 
K00 the very thing held in common is set up as a master keysetting out of a 
master key only with the common devices 012and 3 is possiblewithout performing 
new key sending. If the value Enc (KOOKmaster) which enciphered the new master 
key Kmaster by the node key K00 is stored in a recording medium via a network 
and distributed to the devices 012and 30nly the devices 012and 3 become 
possible [ solving the code Enc (K00 Kmaster) using the share node key K00 held 
in each deviceand obtaining master key:Kmaster ]. It is shown that Enc (KaKb) is 
the data which enciphered Kb by Ka. 

[01 10]When it is revealed in t at a certain time that key:K001 1 which the device 3 
ownsKOOl KOOKOand KR were analyzed by the aggressor (hacker)and it was 
exposed of KRAfter itin order to protect the data transmitted and received by a 
system (group of the devices 012and 3)it is necessary to separate the device 3 
from a system, for that purpose — a node key — : — K — 001 — K — 00 — K - 



— zero — KR — respectively — being new — a key — K — ( — t — ) — 001 — K 

— (— t — ) — 00 — K — (— t — ) — zero — K — (— t — ) — R — updating — 
a device — zero — one — two — the — updating — a key — it is necessary to 
tell . Hereit is shown that K(t) aaa is an updating key of generation (Generation)* 
of the key Kaaa. 

[01 1 1]Distribution processing of an updating key is explained. The renewal of a key 
the table constituted by the block data called the validation key blocks 
(EKB:Enabling Key Block) shown in drawing 12 (A)for example For examplea 
networkOr it performs by storing in a recording medium and supplying the devices 
01and 2 

[0112]It is constituted as block data which has a data configuration which can 
update only the required device of renewal of a node key in the validation key 
blocks (EKB) shown in drawing 12 (A). In the devices 01 and 2 in the tree structure 
shown in drawing 1 1 the example of drawing 12 is the block data formed for the 
purpose of distributing the generation's t updating node key. drawing 1 1 — from — 
being clear — as — a device — zero — a device — one — updating — a node 
key — 5*=***** — K — (— t — ) — 00 — K ~ (— t — ) — zero — K — (— t — ) 

— R — required — a device — two — updating — a node key — ****** — K — 
(— t — ) — 001 — K — (— t — ) — 00 — K — (— t — ) — zero — K — (— t — 
) — R — being required . 

[01 13]As shown in EKB of drawing 12 (A)two or more cryptographic keys are 
contained in EKB. The cryptographic key of the bottom is Enc (K0010K(t)001). this 

— a device — two — having — a leaf key — K — 0010 — enciphering — having 
had — updating — a node key — K — ( — t — ) — 001 — it is — a device — two 

— self — having — a leaf key — this — a cryptographic key — decoding — K — 
( — t — ) — 001 — it can obtain . using K(t)001 obtained by decodingdecoding of 
the 2nd step of cryptographic key Enc (K — ( — t — ) — 001 — K — ( — t — ) — 
00) is attained from under drawing 1 2 (A)and updating node key K(t)00 can be 
obtained, belowone by onethe 2nd step of cryptographic key Enc (K — ( — t — ) - 

— 00 — K — ( — t — ) — 0) is decoded from on drawing 12 (A)the 1 st step of 
cryptographic key Enc (K(t) 0 and K (t) R) is decoded from on updating node key 
K(t)0 and drawing 12 (A)and K(t) R is obtained, on the other hand — a device — 
zero — one — a node key — K — 000 — updating — an object — containing — 
not having — updating — a node key — ****** — being required — a thing — K 

— (— t — ) — 00 — K — (— t — ) — zero — K — (— t — ) — R — it is . The 
devices 0 and 1 decode the 3rd step of cryptographic key Enc (K000K(t)00) from 
on drawing 12 (A)and acquire K(t)00hereafterthe 2nd step of cryptographic key 
Enc (K — ( — t — ) — 00 — K — (— t — ) — 0) is decoded from on drawing 12 
(A)the 1 st step of cryptographic key Enc (K(t) 0 and K (t) R) is decoded from on 
updating node key K(t)0 and drawing 12 (A)and K(t) R is obtained. Thusthe devices 
01 and 2 can obtain updated key K(t) R. The index of drawing 12 (A) shows the 
actual address of the node key and leaf key which are used as a decryption key. 
[0114]The node key of the upper stage of the tree structure shown in drawing 1 1 : 
when renewal of K(t) 0 and K (t) R is unnecessary and the update process of only 



the node key K00 is requiredBy using the validation key blocks (EKB:Enabling Key 
Block) of drawing 12 (B)updating node key K(t)00 can be distributed to the devices 
01and 2. 

[0115]EKB shown in drawing 12 (B) is available when distributing a medium key 
peculiar to the new master key sharedfor example in a specific groupor a recording 
medium. As an examplethe recording medium with the devices 012and 3 in the 
group who shows by a dotted line is used for drawing 1 l and suppose that new 
common master key K(t) master is required, this — the time — a device — zero - 

- one — two — three — being common — a node key — K — 00 — having 
updated — K — ( — t — ) — 00 — using — being new — being common — 
updating — a master key — : — K — ( — t — ) — master — having enciphered — 
data — Enc (K (t)K(t) master) — drawing 12 — (— B — ) — being shown — EKB 

— distributing . By this distributionthe distribution as data of the device 4 etc. 
which is not decoded in other groups' apparatus is attained. The same may be said 
of a medium key. 

[01 16]That isif the devices 01 and 2 decode the above-mentioned cryptogram 
using K(t)00 which processed and obtained EKBit will become possible to obtain 
master key:K(t) master in t timeand medium key:K(t) media. 
[01 1 7][Acquisition of the medium key which uses EKB] as an example of 
processing which obtains medium key K(t) media in t time proposed to drawing 13 
by Japanese Patent Application No. 2000-105328 which is the patent application 
of these people's pointK (t) Processing of the device 2 which received EKB shown 
in the data Enc (K(t) 00 and K (t) media) which enciphered new common medium 
key K(t) media using OOand drawing 12 (B) via the recording medium is shown. 
[01 18]As shown in drawing 1 1 suppose that four devices of the devices 012and 3 
surrounded by the dotted line are contained in a certain recording and reproducing 
system. When are RIBOKU the device 3 and using the medium key assigned for 
every recording medium drawing 13 The processing at the time of asking for a 
medium key required in order that a recording and reproducing device (device 2) 
may encipher or decode the contents on a recording medium using the debye 
skiing which EKB (EnablingKey Block) stored in the recording medium and a 
recording and reproducing device memorize is expressed. 

[01 19]The leaf key K0010 assigned only to itself and the node key (respectively 
K001 K_00K_0K_R) of each nodes 001 OOand OR from it to a wooden route are 
safely stored in the memory of the device 2. The device 2 calculates node key 
K(t)_001 of the node 001 by index (index) decoding the cryptogram of 0010 among 
EKB(s) stored in the recording medium of drawing 13 by the leaf key K_0010 which 
he hasNextit needs to calculate medium key K(t)jnedia using it by decoding the 
cryptogram of 001 and index (index) calculating node key K(t)_00 of the node 
OOusing it finallyand decoding a cryptogram. These calculation times increase in 
proportion to the depth to the node which enciphers a medium key from a leaf 
becoming deep. That isin the big system by which many recording and reproducing 
devices existmany calculations are needed. Thusthe data encryption processing 
and the decoding processing mode using the medium key calculated and acquired 



are explained hereafter. 

[01 20] [Contents recording processing using a medium key] According to the 
processing block figure of drawing 14 an example of encryption processing of the 
data which the cipher-processing means 150 performsand the recording 
processing to a recording medium is explained. 

[0121]The recording and reproducing device 100 shown in drawing 14 acquires a 
medium key by calculation processing based on EKB which self mentioned above. 
[0122]Mextit is inspected whether as for the recording and reproducing device 
100disk ID (Disc ID) as identification information is already recorded on the 
recording medium 200 which is an optical disc. If recordeddisk ID (Disc ID) is 
readanci if not recordedfor exampleit was set at random or beforehand in the 
cipher-processing means 150disk ID (Disc ID) will be generated by methodssuch 
as a random number generationand it will record on a disk. The thing with one 
stored in read in area etc. since it is good is also possible for disk ID (Disc ID) on 
the disk. 

[0123]A medium key and disk ID are used for the record reproducer 100 nextand it 
generates a disk inherent key (Disc Unique Key). As a concrete generation method 
of a disk inherent key (Disc Unique Key)The method of Example 1 using the result 
obtained by inputting a medium key and disk ID (Disc ID) into the hash function 
using a block cipher function as shown in drawing 15 To hash function SHA-1 
defined by FIPS 180-1. The data generated by the bit connection to a medium key 
and disk ID (Disc ID) is inputtedand the method of Example 2 which uses only 
required data length as a disk inherent key (Disc Unique Key) from the output of 
160 bits can be applied. 

[0124]Mextfor exampletitle key (Title Key) which is an inherent key for every 
record was defined at random or beforehand in the cipher-processing means 150 
(refer to drawing 1 )it generates by methodssuch as a random number 
generationand records on the disk 200. 

[0125]Mextthe combination of title key (Title Key) to a disk inherent key (Disc 
Unique Key) and a title inherent key (Title Unique Key) are generated. 
[0126]The concrete method of this title inherent key (Title Unique Key) 
generationThe method of Example 1 using the result obtained by enciphering a 
title key by using a disk inherent key as a key using a block cipher function as 
shown in drawing 16 To hash function SHA-1 defined by FIPS 180-1. The data 
generated by the bit connection to a medium key and disk ID (Disc ID) is 
inputtedand the method of Example 2 which uses only required data length as a 
title inherent key (Title Unique Key) from the output of 160 bits can be applied. 
[0127]In the above-mentioned explanationa disk inherent key (Disc Unique Key) is 
generated from a medium key and disk ID (Disc ID)Although he is trying to 
generate a title inherent key (Title Unique Key) from this and the title key (Title 
Key)respectivelya title inherent key (Title Unique Key) being directly generated 
from a medium keydisk ID (Disc ID)and the title key (Title Key)using a disk 
inherent key (Disc Unique Key) as unnecessaryandA key equivalent to a title 
inherent key (Title Unique Key) may be generated from a medium key (Master Key) 



and disk ID (Disc ID)without using the title key (Title Key). 

[0128]Subsequent processing is explained using drawing 14 . The block seed (Block 
Seed) who the 1-4th byte of the head of the block data inputted as encrypted 
data is separatedand is outputtedFrom the title inherent key (Title Unique Key) 
generated previouslythe block key (BlockKey) which is a key which enciphers the 
data of the block is generated. 

[0129]The example of the generation method of block key (Block Key) is shown in 
drawing 1 7 . By drawing 17 each shows two examples which generate the 64-bit 
block key (Block Key) from 32 bits block seed (Block Seed) and a 64-bit title 
inherent key (Title Unique Key). 

[0130]64 bits of key length and the code function whose input and output are 64 
bitsrespectively are being used for Example 1 shown in the upper row. A title 
inherert key (Title Unique Key) is used as the key of this code functionand the 
result which inputted the value which connected the constant (constant) of 32 
bits with block seed (Block Seed)and was enciphered is made into the block key 
(Block Key). 

[0131]E:xample 2 is an example which used hash function SHA-of FIPS 180-1 1. 
The value which connected the block seed (Block Seed) with the title inherent key 
(Title Unique Key) is inputted into SHAH What was contracted to 64 bitssuch as 
64 bits of low ranks accepting the output of 160 bitsand using itfor exampleis 
made into the block key (Block Key). 

[0132]Although the example which generates a disk inherent key (Disc Unique 
key)a title inherent key (Title Unique Key)and the block key (Block Key) 
aboverespectively was explainedFor examplewithout performing generation of a 
disk inherent key (Disc Unique Key) and a title inherent key (Title Unique Key)The 
block key (Block Key) may be generated using a medium keydisk ID (Disc IDXitle 
key (Title Key)and the block seed (Block Seed) for every block. 
[0133]Generation of a block key will encipher block data using the generated block 
key (Block Key). As shown in the lower berth of drawing 14 it dissociates (selector 
1608)and the 1st - m byte (for examplem= 8 bytes) of the head of block data 
including the block seed (Block Seed) do not consider it as the candidate for 
encryptionbut enciphers from the m+1st byte to final data. In m byte who is not 
encipheredthe 1-4th byte as BURROKU seed is also contained. The block data 
after the m+1st byte separated by the selector is enciphered according to the 
encryption algorithm beforehand set as the cipher-processing means 150. As an 
encryption algorithmDES (Data Encryption Standard) specifiedfor example by FIPS 
46-2 can be used. 

[0134]Gontents are block unitsand encryption is given by the above processing 
with the block key generated based on the medium key by which generation 
management was carried outblock seedetc.and they are stored in a recording 
medium by it. 

[0135]Nextto the recorded enciphered content dataa recording and reproducing 
device calculates a digital signature using the secret key (signature generating 
key) of a public-key-encryption system assigned to selfand records this on a 



recording medium with an own public key certification and contents data. As a 
generation method of a digital signatureEC-DSA (Elliptic Curve Digital Signature 
Algorithm) under standard establishment can be used by IEEE P1363for example. 
The flow chart explaining the outline of the recording processing of contents is 
shown in drawing 18 . 

[0136]Firsta recording and reproducing device performs encryption processing of 
recording object contents in Step S101. Contents encryption is performed as 
encryption processing of the block data using a block keyas explained using 
drawing 14 . 

[0137]In Step S102a recording and reproducing device calculates the digital 
signature to enciphered content using the secret key (signature generating key) of 
a public-key-encryption system assigned to self. As a generation method of a 
digital signatureEC-DSA (Elliptic Curve Digital Signature Algorithm) under standard 
establishment is applicable by IEEE P1363for example. 

[0138]Nextin Step S103a recording and reproducing device matches with record 

contents the digital signature and public key certification which were generatedand 

records them on a recording mediumand recording processing (S102) to the 

recording medium of encryption data is performed in Step S104. 

[0139]The detailed process flow in the case of performing a digital signature to 

enciphered content and performing record is shown in drawing 19 . 

[0140]In Step S201a recording and reproducing device acquires a medium key by 

the above-mentioned EKB processing (refer to drawing 13 ). 

[01 41]In S202it is inspected whether disk ID (Disc ID) as identification information 
is already recorded on the recording medium. If are recordedand this disk ID is 
read and it is not recorded by S203by S204disk ID is generated by the method 
defined at random or beforehandand it records on a disk. Nextin S205a disk 
inherent key is generated using a medium key and disk ID. It asks to have 
explained the disk inherent key previously by applying the method of using hash 
function SHA-1 defined by FIPS 180-1the method (refer to drawing 15 ) of using 
the hash function based on a block cipheretc. 

[0142]Nextit progresses to S206and the title key (Title Key) as a peculiar key for 
the one record of every is generatedand the generated title key is recorded on a 
disk (recording medium). Nextby S207a title inherent key is generated from the 
above-mentioned disk inherent key and a title key (refer to drawing 16 ). 
[0143]A recording and reproducing device receives S208 the encrypted data of 
the contents data which should be recorded in the form of a TS packet. By 
S209TS processing means 300 adds ATS which is the time information which 
received each TS packet. Or the value which combined the copy control 
information CCI and ATS and the information of further others is added. Nextit is 
judged whether the TS packet which added ATS was received one by one by 
S2101 block is formedfor examplethe identification data in which whether it having 
amounted to X= 32 and the end of a packet are shown was received. When one of 
conditions is satisfiedit progresses to Step S21 land the packet to X individual or 
the end of a packet is put in orderand 1 -block block data is formed. 



[0144]Nextthe cipher-processing means 150 is S212 and generates the block key 
which is; a key which enciphers the data of the block from 32 bits (block seed 
containing ATS) of the head of block dataand the title inherent key generated by 
S207 (refer to drawing 17 ). 

[0145]In S213the block data formed by S21 1 using the block key is enciphered. As 
explained also in advanceit is the m+1st byte to final data of block data that it is 
the target of encryption. DES (Data Encryption Standard) as which an encryption 
algorithm is specifiedfor example by FIPS 46-2 is applied. 

[0146]By S214it judges whether a recording block is the 1st blockand when it is 
the 1st blockin S215a digital signature is generated by using block data as digital 
signature object dataand it records on a recording medium with a public key 
certification. The generation processing of a digital signature applies EC-DSA 
(Elliptic Curve Digital Signature Algorithm) under standard establishment for 
exampleby IEEE P1363. 

[0147]By S216the enciphered block data is recorded on a recording medium. By 
S217it is judged whether all the data was recorded. If all the data is 
recordedrecording processing is ended and all the data is not recordedit will return 
to S20& and processing of the remaining data will be performed. 
[01 48] Contents will be enciphered by the above processingit will be recorded on a 
recording mediumand the digital signature to the block data of enciphered content 
and a public key certification will be further recorded on a recording medium. 
[0149]The contents stored in a recording mediuma title keya DEJITASHIRU 
signaturea public key certificationand other contents associated data are recorded 
with composition identifiable in each correspondence. For exampleit can match by 
recording on a recording medium by using management data as a table. The 
example of a table format in the case of recording the address information of the 
associated data about record contents as a table is shown in drawing 20 . 
[0150]As shown in drawing 20 each contents with contents associated data. It is 
managed as a filethe address of contents datathe address of a title keythe 
address of a digital signaturethe address of a public key certificationand the other 
tables recorded about file information are generatedand it is stored in a recording 
medium. 

[0151]Mextwhen recording enciphered content on a recording mediumthe 
processing which does not perform a signature to enciphered contentbut performs 
a digital signature to the title key generated corresponding to contentsand 
performs contents recording is explained using the flow of drawing 21 . 
[0152]In Step S301a recording and reproducing device acquires a medium key by 
the above-mentioned EKB processing (refer to drawing 13 ). 

[0153]In S302it is inspected whether disk ID (Disc ID) as identification information 
is already recorded on the recording medium. If are recordedand this disk ID is 
read and it is not recorded by S303by S304disk ID is generated by the method 
defined at random or beforehandand it records on a disk. Nextin S305a disk 
inherent key is generated using a medium key and disk ID. It asks to have 
explained the disk inherent key previously by applying the method of using hash 



function SHA-1 defined by FIPS 180-1 the method (refer to drawing 15 ) of using 
the hash function based on a block cipheretc. 

[0154]Nextit progresses to S306and the title key (Title Key) as a peculiar key for 
the one record of every is generatedand the digital signature to the generated title 
key is performed. The generation processing of a digital signature applies EC-DSA 
(Elliptic Curve Digital Signature Algorithm) under standard establishment for 
exampleby IEEE P1363. The title keydigital signatureand public key certification 
which v/ere generated are stored in a recording medium (disk). 
[0155]Nextby S307a title inherent key is generated from the above-mentioned 
disk inherent key and a title key (refer to drawing 16 ). 

[0156]A recording and reproducing device receives S308 the encrypted data of 
the contents data which should be recorded in the form of a TS packet. By 
S309TS processing means 300 adds ATS which is the time information which 
received each TS packet. Or the value which combined the copy control 
information CCI and ATS and the information of further others is added. Nextit is 
judged whether the TS packet which added ATS was received one by one by 
S3101 block is formedfor examplethe identification data in which whether it having 
amounted to X= 32 and the end of a packet are shown was received. When one of 
conditions is satisfiedit progresses to Step S31 land the packet to X individual or 
the end of a packet is put in orderand 1 -block block data is formed. 
[0157]Nextthe cipher-processing means 150 is S312 and generates the block key 
which is a key which enciphers the data of the block from 32 bits (block seed 
containing ATS) of the head of block dataand the title inherent key generated by 
S307 (refer to drawing 1 7 ). 

[0158]In S313the block data formed by S31 1 using the block key is enciphered. As 
explained also in advanceit is the m+1st byte to final data of block data that it is 
the target of encryption. DES (Data Encryption Standard) as which an encryption 
algorithm is specifiedfor example by FIPS 46-2 is applied. 

[0159]By S314the enciphered block data is recorded on a recording medium. By 
S315it is judged whether all the data was recorded. If all the data is 
recordedrecording processing is ended and all the data is not recordedit will return 
to S308 and processing of the remaining data will be performed. 
[0160]Contents will be enciphered by the above processingit will be recorded on a 
recording mediumand the digital signature to the title key corresponding to 
enciphered content and a public key certification will be further recorded on a 
recording medium. 

[0161]Although the digital signature was given to the title key in the above- 
mentioned examplea digital signature may be given to a title key and disk ID. By 
doing in this wayit can clarify that the data was recorded on the diskand that by 
which the data was copied to other disks can make easily judgment that it is an 
unjust copy. 

[01 62] [Contents playback processing using a medium key] Nextdecoding of 
enciphered content data and regeneration which were stored in the recording 
medium are explained below using drawing 22 . 



[01 63]In regenerationplayback equipment reads the public key certification and 
digital signature of a recorder which are first recorded with the contents data to 
reproduceand checks such justification. 

[0164]That isif the justification of a public key certification is inspected using the 
public key (signature verification keys) of a reliable center which playback 
equipment holds and it succeeds in thisthe digital signature which the recorder 
created and recorded using the public key (signature verification keys) of a 
recorder contained in the public key certification will be inspected. As an 
inspection method of a digital signatureabove-mentioned EC-DSA can be usedfor 
example. 

[0165]Nextplayback equipment reads the identification information (ID) of a 
recorder from the public key certification currently recordedand checks that 
RIBOKLJ (exclusion) of this recorder is not carried out from a system from this and 
RIBOKESHON information. 

[0166](RIBOKU inspection using a RIBOKESHON list) As RIBOKESHON 
informationthe RIBOKESHON list shownfor example in drawing 23 can be used. A 
center gives a digital signature to the data which wrote together ID of the 
apparatus which carries out RIBOKU (exclusion) as a RIBOKESHON list is shown 
in a figureand the version number of a list. For examplethe memory of the 
apparatus (recording and reproducing device) by which 1 manufacture is carried 
out is made to memorize this RIBOKESHON list. It is made to circulate via a 
network or a recording medium together with 2 contents data. It enables it to 
acquire the RIBOKESHON information that playback equipment is newerby 
circulating the inside of a system by which method at the time of regeneration. 
[0167]When using a RIBOKESHON listin order to inspect that a list is not what 
was forged and alteredverification processing of a signature of the center stored in 
the RIBOKESHON list is performed. The verification processing of a signature can 
be inspected like signature verification of a public key certification using the public 
key (signature verification keys) of the center which apparatus (recording and 
reproducing device) has beforehand. 

[0168](RIBOKU inspection using EKB) It is good also as composition which does 
not take the composition distributed to each apparatus as a list as RIBOKESHON 
information shown in drawing 23 againbut distinguishes RIBOKU using EKB. For 
examplein the system by which apparatus has been arranged at the tree form 
shown in drawing 1 l it is assumed that EKB shown in the example 1 of (A) of 
drawing 12 was stored in the recording medium. If each apparatus sees the index 
of EKB one by one at this timehe can understand that what expressed with tree 
form the node key updated by EKB becomes like the thick line of drawing 24 . 
[0169]And he gets blocked only the apparatus located under the leaf (leaf) of the 
tree shown by the thick lineand that the updated node key can be obtained can 
understand that they are only the devices 01 and 2. And RIBOKU [ the other 
apparatus / system ] can be judgedlt becomes possible to suspend redistribution 
of the record contents by RIBOKU apparatus by performing processing which 
forbids reproduction of the contents data which apparatus with these ID recorded 



at the time of execution of regeneration. It is premised on the position of the leaf 
in drawing 1 1 and ID of a device corresponding in this example. That isthe 
existence of RIBOKU is distinguished by performing trace processing of the index 
of validation key blocks (EKB) based on said ID. 

[0170]The RIBOKU inspection by trace processing is explained in detail. Firstthe 
example of a format of validation key blocks (EKB) is shown in drawing 25 . The 
version 1001 is an identifier which shows the version of validation key blocks 
(EKB). A version has a function which shows the correspondence relation of the 
function and contents which identify the newest EKB. The depth 1002 shows the 
hierarchy number of the hierarchy tree to the device of the distribution destination 
of validation key blocks (EKB). The data pointer 1003 is a pointer in which the 
position of the data division in validation key blocks (EKB) is shown. 
It is a pointer which the tag pointer 1004 shows the position of a tag part toand 
the signature pointer 1005 shows the position of a signature. 

[0171]The data division 1006 stores the data which enciphered the node key 
updatedfor example. For exampleeach cryptographic key about the updated node 
key as shown in drawing 13 is stored. 

[0172]The tag part 1007 is a tag in which the physical relationship of the node key 
and lear key which were stored in the data divisionand which were enciphered is 
shown. The grant rule of this tag is explained using drawing 26 . Drawing 26 shows 
the example which sends the validation key blocks (EKB) previously explained by 
drawing 1 2 (A) as data. The data at this time comes to be shown in the table (b) of 
drawing 26 . Let the address of the top node contained in the cryptographic key at 
this time be a top node address. In this casesince updating key K(t) R of the route 
key is containeda top node address serves as KR. At this timethe data Enc (K(t) 0 
and K (t) R) of the highest rung is in the position shown in the hierarchy tree 
shown in (a) of drawing 26 for example. Herethe following data is Enc (K (t) 00K(t)0). 
It is in the position at the lower left of front data on a tree. 

A tag is set upand 1 is set up when there is dataand there is nothingO and. A tag 
is set uo as {a left (L) tag and a right (R) tag}. Since there is data in the left of the 
data Enc (K(t) 0 and K (t) R) of the highest rung and there is no data in L tag =0 
and the rightit is set to R tag =1. Hereaftera tag is set as all the data and the data 
row shewn in drawing 26 (c) and a tag sequence are constituted. 
[01 73] A tag is a key arrangement identification tag set up in order to show where 
[ of a tree structure ] the data Enc (KxxxKyyy) is located, the key data Enc 
(KxxxKyyy) stored in a data division — since ... is only enumeration data of the key 
enciphered simplyit enables distinction of the position on the tree of the 
cryptographic key stored as data with the tag mentioned above. The node index to 
which encryption data was made to correspond like composition of that previous 
drawing 12 explained is usedwithout using the tag mentioned abovefor exampleit is 
0:Enc (K(t) 0 and K (t) root). 
00:Enc(K(t)00K(t)0 
000:Enc(K((t)000K(T)00) 



Although it is also possible to consider it as a data configuration like ...in the 
distribution etc. which it will become redundant data and data volume will increase 
if it has composition using such an indexand pass a networkit is not desirable. On 
the other handdistinction of a key position is attained with small data volume by 
using the tag mentioned above as index data in which a key position is shown. 
[0174]fr returns to drawing 25 and an EKB format is explained further. A signature 
(Signature) is an electronic signature which the EKB issue office which published 
validation key blocks (EKB)for examplea certificate authoritya lock management 
centercontents ROBAIDAa settlement-of-accounts organizationetc. perform. It 
checks that the devices which received EKB are the validation key blocks (EKB) 
which the just validation key-blocks (EKB) publisher published by signature 
verification. 

[0175]The tag stored in EKB so that I might be understood from the explanation 
about d rawing 26 shows 0 or 1 existence of the key data of the left of a self- 
nodeand a right node. That iswhen there is datathe case where there are not 0 
and data is set up as 1. The tracking processing of EKB based on leaf IDi.e.how to 
followis performed using the tag based on such conditioning. 
[01 76]Fursuit (how to follow) of EKB based on leaf ID is explained using drawing 
27. Let the device which has the leaf key K1001 as shown in drawing 27 (a) be a 
RIBOKU device [1001]. At this timeEKB has the composition of a cryptographic 
key like drawing 27 (b)and a tag. EKB of drawing 27 (b) turns into EKB which 
updated KRK1K10and K100in order RIBOKU [ one device [1001] of drawing 27 
(a)]. 

[0177]By processing this EKBall leaves other than a RIBOKU device [1001] can 
acquire updated route key K(t) R. That issince the leaf which stands in a row in 
the low rank of the node key K0 holds in a device the node key K0 which is not 
updatedthe acquisition of updating route key K(t) R of it is attained by decoding 
Enc (K0K(t) R) by K0. The leaf not more than K1 1 acquires updating node key 
K(t)1 using K11 which is not updated by decoding Enc (K1 1K(t)1) by K1 1An 
updating route key is acquirable by decoding Enc (K(t) 1 and K (t) R) by K(t)1. Only 
by one decoding step increasing also about the low rank leaf of K101an updating 
route key is acquirable similarly. 

[01 78]It is a self leaf keyand the device [1000] with the leaf key [ RIBOKU / leaf 
key ] K1000 decodes Enc (K1000K(t)100)after acquiring K(t)100it decodes the 
node key of a higher rank one by oneand can acquire an updating route key. 
[01 79]RIBOKU — having had — a device — [— 1 001 — ] — self — a leaf — one 
— a step — a top — updating — a node key — K — ( — t — ) — 100 — EKB — 
processing — being unacquirable — since — after all — updating — a route — a 
key — K — ( — t — ) — R — being unacquirable . 

[0180]The data division shown in drawing 27 (b) and EKB which has a tag are 
distributed to the just device [ RIBOKU / device ] from an EKB issue officeand it 
is stored in the device. 

[0181]The device which tries to perform RIBOKU verification acquires ID from a 
public key certification after verification of the public key certification of the 



RIBOKU device [ID=1001] of drawing 27 (a). This ID is [1001] and shows the leaf 
position of EKB distribution tree composition. 

[0182]The device which took out ID [1001] verifies whether the device 
corresponding to the leaf of ID=1 001 is set up as an effective leaf device in EKB. 
It performs as processing which judges whether route key K(t) R by which this 
verification [1001]i.e.a leafwas updated is acquirable. 

[0183]For exampleif it is a leaf belonging to the low rank of the renewal node keys 
of un-(K0 of ex. drawing 27 (a)K1 1etc.)When it is a leaf which can judge if RIBOKU 
is clear and it is a just deviceand belongs to the low rank of an updating node 
keyA judgment RIBOKU [ whether the encryption data which can acquire the 
updating node key is stored in EKB / the entity ] is attained. 
[0184]The example which performs EKB tracking processing as an example of 
decision processing based on the tag stored in EKB is explained. EKB tracking 
processing is processing which judges whether a key distribution tree can be 
followed from the route key of a higher rank. For exampleaccording to a lower bita 
tree is followed for [1001] which is ID of the leaf [1001] of drawing 27 as 4 bits of 
[1][0][0]and [1] one by one from the most significant bit. If a bit is 1 and it is 
right-hand side and Oit will progress to the left. 

[0185]From the route of drawing 27 (a)the most significant bit of ID [1001] is land 
goes to right-hand side. The tag of the beginning in EKB is 0: {00}and having data 
on both branches is judgedit goes to right-hand sideand it is followed and stuck to 
K1. Nextit progresses to the node of the low rank of K1. The 2nd bit of ID [1001] 
is 0 and goes to left-hand side. It is 2: [00} of drawing 27 (a) and (b)and it judges 
that the tag in which the data existence of the low rank of K1 is shown has data 
on both branchesand it goes to left-hand sideand is followed and stuck to K10. 
The 3rd bit of ID [1001] is 0 and goes to left-hand side. It is 3: {00} of drawing 27 
(a) and (b)and it judges that the tag in which the data existence of the low rank of 
K10 is jshown has data on both branchesand it goes to left-hand sideand is 
followed and stuck to K100. The least significant bit of ID [1001] is land goes to 
right-hand side. The tag in which the data existence of the low rank of K100 is 
shown is 5: {01} of drawing 27 (a) and (b)and does not have data in right-hand side, 
thereforearrive at a node [1001] — it is judged that there is nothing and it is 
judged with the device of ID [1001] being the device which cannot acquire the 
updating route key by EKBi.e.a RIBOKU device. 

[0186]For exampleif the device ID which has the leaf key K1000 of drawing 27 (a) 
is [1000] and the EKB tracking processing based on the tag in the same EKB as 
****Le.the processing which follows a treeis performedSince it can arrive at a 
node [1000]it is judged with it being a just device [ RIBOKU / device ] which can 
acquire the updating route key by EKB. 

[0187]arrive also at the leaf of low rankssuch as the node key which is not 
updatedfor examplefor exampleKOand K1 1at the leaf itself — although there is 
nothingit is possible to arrive at the end node which is not updated in this case. 
Since processing of EKB is possible for the leaf of the low rank of the node which 
is not updated and it can acquire an updating route key using the node key which 



is not updatedit is a just device. It becomes possible [judging with the tag 
corresponding to the node ] whether it is a node key which is not updated. The tag 
corresponding to the node key KO which is not updatedKI land K101 is set to 1: 
{1 1}4: [1 1}and 6 {1 1}and although a low order node or a leaf exists furthertheseNot 
having enciphered key data in EKB is shownand it is judged with the device of the 
leaf of the low rank of these being an effective just device [ RIBOKU / device ]. 
[0188]Although the example shown in drawing 27 is a RIBOKU mode only about 
one deviceit is also possible RIBOKU [ all the leaf devices which are under a 
certain node as shown in drawing 28 ] collectively. The data (cryptographic key) of 
EKB in this case and a tag become like drawing 28 (b). 

[0189]F : or examplesupposing it acquires ID [1000] from the public key certification 
of the leaf device corresponding to K1000 [ RIBOKU / 1000 / the 
device processing which follows a tree based on the tag of EKB based on this ID 
[1000] will be performed. 

[0190]F : rom the route of drawing 28 (a)the most significant bit of ID [1000] is land 
goes tc right-hand side. It is tag Oof the beginning in EKB: {00}and having data on 
both branches is judgedit goes to right-hand sideand it follows and sticks to K1. 
Nextit progresses to the node of the low rank of K1. The 2nd bit of ID [1000] is 0 
and goes to left-hand side. The tag in which the data existence of the low rank of 
K1 is shown is 2: {10} of drawing 13 (a) and (b)and does not have data in left-hand 
side, thereforearrive at a node [1000] — there is nothing. The tags corresponding 
to the end node K1 at this time are {10}and are not {1 1} without low-ranking data. 
[0191]The tag {10} shows that the enciphered key data for acquiring K1 (t) which 
can be decoded and which was updated only in the right-hand side low-ranking 
node or leaf of K1 is stored in EKB. 

[0192]Thusthe final point which arrives based on leaf ID is a nodeand when the 
correspondence tag of the last node has values other than {1 1}having low-ranking 
enciphered key data in EKB further is shown. In this casesince the leaf device with 
that ID cannot acquire the route key updated by processing of EKBit is judged 
with it being the device [ RIBOKU / device ]. 

[0193]Thusit becomes possible to judge RIBOKU [ the communications partner ] 
based on leaf ID stored in the public key certification acquired from the 
communications partner in authenticating processing. 

[0194]The process flow using EKB about RIBOKU device decision processing is 
shown in drawing 29 . Each step of a flow is explained. In Step S351ID is acquired 
from a public key certification to be examined. In Step S352tracking processing 
aiming at the leaf or lead which ID shows based on the tag of EKB using acquired 
ID is performed. 

[0195]7racking processing is performed in the procedure explained using above- 
mentioned drawing 27 and drawing 28 . as a result of tracking processingarrive at 
the leaf or node which ID showsor arrive — even if it is a case where there is 
nothingin the leaf or node which ID showsit is judged whether acquisition of 
whether EKB processing is possible and an updating route key is possible (S353). 
[01 96]If judged with it being ID in the position in which EKB processing is 



possibleit will progress to Step S354 and will judge with the device corresponding 
to ID being a just device [ RIBOKU / device ]. If judged with it being ID which is in 
the position in which EKB processing is impossible on the other handit will 
progress to Step S355 and will judge with the device corresponding to ID being an 
inaccurate device [ RIBOKU / device ]. 

[0197]In above-mentioned tracking processingalthough the tag part of EKB 
usesthe data division does not use. Size of EKB for them can be made small by 
using not the usual EKB shown in drawing 25 but EKB without a data division using 
thisin order to express RIBOKESHON information. Of courseit is also possible to 
use EKB for protecting the usual contents shown in drawing 25 since 
RIBOKESHON information is expressed. 

[0198]As mentioned abovethat verification which does not require RIBOKU [ the 
apparatus which recorded contents to the recording medium by the RIBOKU 
inspection according to a RIBOKESHON list or trace processing of an EKB tree ] 
is performed. On condition that RIBOKU [ the apparatus which recorded 
contents ] was verifiedplayback equipment continues regeneration of contents 
data. Like the encryption and recording processing which were explained using 
drawing 14f rom a medium key and disk IDin regenerationgenerate a disk inherent 
key and A disk inherent keyA title inherent key is generated from a title 
keyfurtherfrom a title key and the block seed read in a recording mediuma block 
key is generated and decoding processing of the encryption data of the block unit 
read in the recording medium 200 is performedusing a block key as a decryption 
key. 

[0199]The outline of regeneration is explained using the flow chart of drawing 30 . 
Firstin Step S401 playback equipment performs the public key certification of a 
storing salmon **** contents recording deviceand verification of a digital signature 
to the recording medium which recorded reproduction object contents. After 
performing the center signature of a public key certification using the public key of 
a center and checking the justification of a public key certification firstverification 
takes out the public key of the contents recording device stored in the public key 
certificationand performs verification of a contents recording person's digital 
signature. Any verification follows that to the following step by O.K.if one of 
verification is NGsubsequent stepwise execution is forbidden and regeneration is 
stopped. 

[0200]Nextthe RIBOKESHON inspection of a contents recording device is 
performed in Step S402. This RIBOKESHON inspection is conducted by inspecting 
whether apparatus ID stored in the RIBOKESHON list shown in drawing 23 
beforehand stored in playback equipmentfor example and apparatus ID in a public 
key certification have a match. Or tree search processing by the above-mentioned 
EKB tree composition may be performed. If judged with RIBOKU [ the contents 
recording device ] in the RIBOKESHON inspection of Step S402when RIBOKU 
[ the following step / progress and jsubsequent stepwise execution is forbidden 
and regeneration is stopped. 

[0201]When judged with RIBOKU [ the contents recording device ] in the 



RIBOKESHON inspection of Step S402In Step S403read-out from the recording 
medium of enciphered content is performeddecoding processing of enciphered 
content is performed in Step S404and reproduction of contents is performed. 
[0202]Thussince it had composition which performs only reproduction of the 
contents recorded by the apparatus [ RIBOKU / apparatus / by judging the 
RIBOKU situation of a contents recording device ] on the occasion of the 
contents playback processing stored in the recording mediumlt is prevented that 
circulation use of the contents recorded unjustly is carried out disorderly. A 
RIBOKU judging is judged by ID stored in the public key certificationand the 
reliability is maintained. 

[0203]Nextthe detailed processing in the case of performing reproduction of the 
record contents by which the digital signature was performed to enciphered 
content using drawing 31 is explained. 

[0204]In Step S501 playback equipment reads a medium key and disk ID from a 
recording mediumand performs read-out of a title keya digital signatureand a 
public key certification in Step S502. When a signature and a public key 
certification do not exist (S503:No)it is judged with their not being the contents by 
just recording processingexecution of subsequent processings is suspendedand 
regeneration is ended. 

[0205]When a signature and a public key certification exist (S503:Yes)verification 
of a puolic key certification is performed in Step S504. Verification of a public key 
certification is performed using the public key of the center (certificate authority) 
which performs issue management of the public key certification which playback 
equipment holds. Verification of a public key certification is O.K.and if justification 
is checkedit will progress to the following step. When justification verification is 
NGexecution of subsequent processings is suspended and regeneration is ended. 
[0206]Nextin Step S505the identifier (ID) of a recorder which performed contents 
recording is taken out from a public key certificationand a RIBOKU inspection is 
conducted. A RIBOKU inspection is performed by either Libor Christo of above- 
mentioned drawing 23 or tree search processing. If judged with there being no 
RIBOKU of the recorder of contentsit will progress to the following stepand if 
judged with those with RIBOKUexecution of subsequent processings will be 
suspended and regeneration will be ended. 

[0207]Mextin S506a disk inherent key is generated using a medium key and disk ID. 
It asks to have explained the disk inherent key previously by applying the method 
of using hash function SHAH defined by FIPS 180-1 the method (refer to drawing 
1_5) of using the hash function based on a block cipheretc. 
[0208]Nextit progresses to S507 and a title inherent key is generated from the 
title key which read and read the title key (Title Key)and a disk inherent key (refer 
to drawing 16 ). 

[0209]ln S508playback equipment reads the block data of the contents data which 
should be reproduced. It reads by S509 and judges whether a block is the 1st 
blockand in being the 1st blockit performs verification of a contents recording 
person's (recorder) digital signature generated to the 1st block in Step S510. 



Verification of a digital signature is performed using the public key of the contents 
recording device picked out from the public key certification in which justification 
was verified. Verification of a digital signature is O.K.and if justification is 
checkedit will progress to the following step. When justification verification is 
NGexecution of subsequent processings is suspended and regeneration is ended. 
[021 0]h Step S51 1the block key which is a key which decodes the data of the 
block is generated from 32 bits (block seed containing ATS) of the head of block 
dataand the title inherent key generated by S507 (refer to drawing 17 ). 
[021 1]In S512block data is decoded using a block key. DES (Data Encryption 
Standard) as which a decoding algorithm is specifiedfor example by FIPS 46-2 is 
applied. 

[0212]By S513it is judged whether all the data was read. If all the data is 
readregeneration is ended and all the data is not readit will return to S508 and 
processing of the remaining data will be performed. 

[0213]Thusverification of a public key certificationthe judgment of RIBOKU of a 
contents recording deviceSequential execution of the verification of the digital 
signature to the block data of enciphered content will be carried outthe 
justification of contents will be judged based on all the conditions having been 
satisfiedand decoding from the recording medium of enciphered content and 
regeneration will be performed. 

[0214]Mextthe detailed processing in the case of performing reproduction of the 
record contents by which the digital signature was performed to the title key using 
drawing 32 is explained. 

[0215]In Step S601 playback equipment reads a medium key and disk ID from a 
recording mediumand performs read-out of a title keya digital signatureand a 
public key certification in Step S602. When a signature and a public key 
certification do not exist (S603:No)it is judged with their not being the contents by 
just recording processingexecution of subsequent processings is suspendedand 
regeneration is ended. 

[0216]When a signature and a public key certification exist (S603:Yes)veriflcation 
of a public key certification is performed in Step S604. Verification of a public key 
certification is performed using the public key of the center (certificate authority) 
which performs issue management of the public key certification which playback 
equipment holds. Verification of a public key certification is O.K.and if justification 
is checkedit will progress to the following step. When justification verification is 
NGexecution of subsequent processings is suspended and regeneration is ended. 
[0217]Nextin Step S605the identifier (ID) of a recorder which performed contents 
recording is taken out from a public key certificationand a RIBOKU inspection is 
conducted. A RIBOKU inspection is performed by either Libor Christo of above- 
mentioned drawing 23 or tree search processing. If judged with there being no 
RIBOKU of the recorder of contentsit will progress to the following stepand if 
judged with those with RIBOKUexecution of subsequent processings will be 
suspended and regeneration will be ended. 

[0218]Nextverification of a contents recording person's (recorder) digital signature 



performed to the title key in Step S606 is performed. Verification of a digital 
signature is performed using the public key of the contents recording device 
picked out from the public key certification in which justification was verified. 
Verification of a digital signature is O.K.and if justification is checkedit will 
progress to the following step. When justification verification is NGexecution of 
subsequent processings is suspended and regeneration is ended. 
[0219]Nextin S607a disk inherent key is generated using a medium key and disk ID. 
It asks to have explained the disk inherent key previously by applying the method 
of using hash function SHAH defined by FIPS 180-1 the method (refer to drawing 
15) of using the hash function based on a block cipheretc. 
[0220]Nextit progresses to S608 and a title inherent key is generated from the 
title key which read and read the title key (Title Key)and a disk inherent key (refer 
to drawing 16 ). 

[0221 ]In S609playback equipment reads the block data of the contents data which 
should be reproduced. In Step S610the block key which is a key which decodes 
the data of the block is generated from 32 bits (block seed containing ATS) of the 
head of block dataand the title inherent key generated by S608 (refer to drawing 
17). 

[0222]In S61 1 block data is decoded using a block key. DES (Data Encryption 
Standard) as which a decoding algorithm is specifiedfor example by FIPS 46-2 is 
applied 

[0223]E3y S612it is judged whether all the data was read. If all the data is 
readregeneration is ended and all the data is not readit will return to S609 and 
processing of the remaining data will be performed. 

[0224]Thusverification of a public key certificationthe judgment of RIBOKU of a 
contents recording deviceSequential execution of the verification of the digital 
signature to the title key of enciphered content will be carried outthe justification 
of contents will be judged based on all the conditions having been satisfiedand 
decoding from the recording medium of enciphered content and regeneration will 
be performed. 

[0225]As mentioned abovein the encryption processing at the time of the record 
over the recording medium of contents dataand the decoding processing at the 
time of the reproduction from a recording mediumBased on the medium key which 
computed the medium key based on EKB and was computed after thatother 
identifiersetc.the key for encryption processing of contents or the key for 
decodirg processings is generated. 

[0226]Although the example mentioned above explained the composition which 
generates the key used for contents data encryption processing and decoding 
processing using a medium keylt is good also as composition which generates the 
key which acquires not a medium key but a master key common to two or more 
recording and reproducing devicesor debye skiing peculiar to a record reproducer 
from EKBand uses it for contents data encryption processing and decoding 
processing based on these. It is also possible to apply as the medium key acquired 
from EKBa master keyor a key which uses the debye skiing itself for encryption 



processing of contents data and decoding processing. 

[0227]As mentioned abovein this inventionwhen a recording and reproducing 
device recorded data on an information recording mediuman own digital signature 
and public key certification were recorded with data. Since he is trying to also 
certainly record with data proof which recorder recordedby this when recording 
informationSince it can specify which recorder recorded it even if the recording 
medium containing the data recorded unjustly circulatedexclusion from a system 
can be performed. 

[0228]When a recording and reproducing device reads dataafter checking the 
justification of the above-mentioned digital signature and the public key 
certification and checking RIBOKU [ the recorder / system ] furtherit had 
composition which reads data. While the inaccurate recorder is delivering the 
powerless thing an attack which does not record a digital signature to inaccurate 
record data by thisexclusion from the system of an inaccurate device is more 
powerfully performed by making it not reproduce the data recorded with an 
inaccurate device with a just device. 

[0229][.Copy control in recording processing Nowin order to protect profitssuch as 
an owner of a copyright of contentsin the licensed deviceit is necessary to control 
the copy of contents.] 

[0230]That isto record contents on a recording mediumthe contents investigate 
whether it is what may be copied (a copy is possible)and it is necessary to make it 
record only the contents which may be copied. When reproducing and outputting 
the contents recorded on the recording mediumthe illegal copy of the contents to 
output needs to be made not to be carried out later. 

[0231]Thenprocessing of the recording and reproducing device of drawing 1 in the 
case of performing record reproduction of contents is explained with reference to 
the flow chart of drawing 33 and drawing 34 performing copy control of such 
contems. 

[0232]F : irstwhen recording the contents of the digital signal from the outside on a 
recording mediumrecording processing according to the flow chart of drawing 33 
(A) is performed. Processing of drawing 33 (A) is explained. The record reproducer 
100 of drawing 1 is explained as an example. If the contents (digital contents) of a 
digital signal are supplied to input-and-output I/F120 via an IEEE1394 serial bus 
etc.in Step S701 input-and-output I/F120 will receive the digital contentsand they 
will follow it to Step S702for example. 

[0233]ln Step S702it is judged whether the digital contents which received can 
copy inout-and-output I/F120. That isthe contents are judged [ that it can copy 
and ] when the contents which input-and-output I/F120 received are not 
enciphered for example (for examplewhen the contents of a plaintext are supplied 
to input-and-output I/F1 20without using above-mentioned DTCP). 
[0234]I1: shall suppose that the recording and reproducing device 100 is a device 
based on DTCPand processing shall be performed according to DTCP. 2-bit EMI 
(Encryption Mode Indicator) as copy control information for controlling a copy is 
prescribed by DTCP. When EMI is 00B (B expresses that the value before that is a 



binary number)Contents express that it is copy-free (Copy-freely)and when EMI is 
OIBcontents express that it is what (No-more-copies) cannot carry out the copy 
beyond it. It expresses that contents are what (Copy-one-generation) may be 
copied only once when EMI is 10Band when EMI is 1 1Bcontents express that it is 
what (Copy-never) the copy is forbidden. 

[0235]E:MI is contained in the signal supplied to input-and-output I/F120 of the 
recording and reproducing device 100and contents are judged [ that it can copy 
and ] when the EMI is Copy-freely and Copy-one-generation. Contents are judged 
[ that it cannot copy and ] when EMI is No-more-copies and Copy-never. 
[0236]ln Step S702when judged [ that contents cannot be copied and ]Steps 
S703-S705 are skippedand recording processing is ended. Thereforecontents are 
not recorded on the recording medium 10 in this case. 

[0237]In Step S702when judged [ that contents can be copied and jit progresses 
to Step S703 and processing in Step S12 of drawing 3 (A)S13and S14 and same 
processing are hereafter performed in Steps S703-S705. That isATS addition to 
the transport packet by TS processing means 300 and encryption processing in 
the cipher-processing means 150 are performedthe enciphered content obtained 
as a result is recorded on the recording medium 195and recording processing is 
ended. 

[0238]EMI is contained in the digital signal supplied to input-and-output I/F120. 
When digital contents are recordedthe informationincluding for exampleembedded 
CCI in DTCPetc.which expresses a copy control state like EMI or EMI with the 
digital contents is also recorded. 

[0239]Under the present circumstancesgenerallythe information showing Copy- 
One-Generation is changed and recorded on No-more-copies so that the copy 
beyond it may not be allowed. 

[0240]In the recording and reproducing device of this inventioncopy control 
informationsuch as this EMIembedded CCIetc.is recorded in the form added to a 
TS packet. That islike Example 2 of drawing 10 or Example 332 bits which added 24 
bits thru/or 30 bitsand copy control information for ATS are added to each TS 
packetas shown in drawing 5 . 

[0241]When recording the contents of the analog signal from the outside on a 
recording mediumrecording processing according to the flow chart of drawing 33 
(B) is performed. Processing of drawing 33 (B) is explained. When the contents 
(analog content) of an analog signal are supplied to input-and-output I/F140input- 
and-output I/F140In Step S71 1the analog content which received the analog 
contentand progressed and received to Step S712 judges whether it can copy or 
not. 

[0242]Here the decision processing of Step S712 to the signal received by input- 
and-output I/F140for example. It is carried out based on whether a macro vision 
(Macrovision) signal and a CGMS-A (Copy Generation Management System- 
Analog) signal are included. That iswhen a macro vision signal is recorded on the 
video cassette tape of a VHS methodit is a signal which serves as a noise. 



Analog content is judged [ that it cannot copy and ] when this is contained in the 
signal received by input-and-output I/F140. 

[0243]For examplea CGMS-A signal is a signal which applied the CGMS signal 
used for the copy control of a digital signal to the copy control of the analog 
signallt is expressed any of what (Copy-freely) has a free copy of contentsthe 
thing (Copy-one-generation) which may be copied only onceor the things (Copy- 
never) to which the copy is forbidden they are. 

[0244]Thereforeanalog content is judged [ that it can copy and ]when a CGMS-A 
signal is; included in the signal received by input-and-output I/F140 and the 
CGMS-A signal expresses Copy-freely and Copy-one-generation. Analog content 
is judged [ that it cannot copy and ] when the CGMS-A signal expresses Copy- 
never. 

[0245]Analog content is judged [ that it can copy and ] when a macro vision signal 
and CGMS-A signal is not included in the signal received by input-and-output 
I/F4 for exampleeither. 

[0246]In Step S712when judged [ that analog content cannot be copied and ]Steps 
S713 thru/or S717 are skippedand recording processing is ended. 
Thereforecontents are not recorded on the recording medium 10 in this case. 
[0247]In [ when judged / that analog content can be copied and / progress to 
Step S713 in Step S712and ] the following and Steps S713 thru/or 
S717Processing in Steps S22 thru/or S26 of drawing 3 (B) and same processing 
are performedand therebydigital conversionMPEG codingTS processingand 
encryption processing are madeand contents are recorded on a recording 
mediumand end recording processing. 

[0248]When the CGMS-A signal is included in the analog signal received by input- 
and-output I/F140 and analog content is recorded on a recording mediumthe 
CGMS-A signal is also recorded on a recording medium. That isthis signal is 
recorded on the portion of the information on CCI shown by drawing 10 or others. 
Under the present circumstancesgenerallythe information showing Copy-One- 
Generation is changed and recorded on No-more-copies so that the copy beyond 
it may not be allowed. Howeverit is not this limitation when a rulesuch as "treating 
the copy control information of Copy-one-generation as No-more-copies although 
recorded without changing into No-more-copies"is decided in the system. 
[0249][Copy control in regeneration] Nextwhen reproducing the contents recorded 
on the recording medium and outputting outside as digital contentsregeneration 
according to the flow chart of drawing 34 (A) is performed. Processing of drawing 
34 (A) is explained. In Step S801S802and S803processing in Step S31 of drawing 4 
(A)S32and S33 and same processing are performed firstand by thisln the cipher- 
processing means 150decoding processing is made for the enciphered content 
read from the recording mediumand TS processing is made. The digital contents 
by which each processing was performed are supplied to input-and-output I/F120 
via the bus 110. 

[0250]Input-and-output I/F1 20 judges whether it is what the digital contents 



supplied there can copy later in Step S804. That isthe contents are judged [ that 
it can copy later and ] when the information (copy control information) which 
expresses a copy control state to the digital contents supplied to input-and- 
output I/F120 like EMI or EMIfor example is not included. 

[0251]When EMI is contained in the digital contents supplied to input-and-output 
I/F120 for exampleThereforewhen EMI is recorded according to the standard of 
DTCP at the time of record of contents. Digital contents are judged [ that it can 
copy later and ] when the EMI (recorded EMI (Recorded EMI)) is Copy-freely. 
Contents are judged [ that it cannot copy later and ] when EMI is No-more-copies. 
[0252]Generally recorded EMI is neither Copy-one-generation nor Copy-never. It 
is because the digital contents which EMI of Copy-one-generation is changed into 
No-more-copies at the time of recordand have EMI of Copy-never are not 
recorded on a recording medium. Howeverit is not this limitation when a rulesuch 
as "treating the copy control information of Copy-one-generation as No-more- 
copies although recorded without changing into No-more-copies"is decided in the 
system. 

[0253]In Step S804when contents are judged [ that it can copy later and jit 
progresses to Step S805and input-and-output I/F120 outputs the digital contents 
outsideand ends regeneration. 

[0254]When contents are judged [ that it cannot copy later and ] in Step 
S804progress to Step S806 and input-and-output I/F120For exampleaccording to 
the standard of DTCPetc.it outputs outside in the form where digital contents are 
not copied to the digital contents laterand regeneration is ended. 
[0255]Namelywhen EMI recorded as mentioned abovefor example is No-more- 
copies 'or although the copy control information of "Copy-one-generation is 
recorded in a systemwithout changing into No-more-copies) The rule of treating 
as No-more-copies" is decidedand when EMI recorded under the conditions is 
Copy-one-generationas for contentsthe copy beyond it is not allowed. 
[0256]For this reasoninput-and-output I/F120 attests mutually between a 
partner s devices according to the standard of DTCPwhen a partner is a just 
deviceenciphers digital contents (when it is a device based on the standard of 
DTCP here)and outputs them outside. 

[0257]Nextwhen reproducing the contents recorded on the recording medium and 
outputting outside as analog contentregeneration according to the flow chart of 
drawing 34 (B) is performed. Processing of drawing 34 (B) is explained. In Steps 
S811 thru/or S815processing in Steps S41 thru/or S45 of drawing 4 (B) and same 
processing are performed. That isread-out of enciphered contentdecoding 
processingTS processingMPEG decodingand D/A conversion are performed. The 
analog content obtained by this is received by input-and-output I/F140. 
[0258]Input-and-output I/F1 40 judges whether it is what the contents supplied 
there can copy later in Step S816. That isthe contents are judged [ that it can 
copy later and ] when copy control informationsuch as EMIis not recorded on the 
contents currently recorded together for example. 

[0259]Contents are judged [ that it can copy later and ]when EMI or copy control 



information is recordedfor example according to the standard of DTCP at the time 
of record of contents and the information is Copy-freely. 

[0260]When EMI or copy control information is No-more-copiesin a systemrecord 
the copy control information of "Copy-one-generationwithout changing into No- 
more-copiesbut. The rule of treating as No-more-copies" is decidedand contents 
are judged [ that it cannot copy later and ] when EMI or copy control information 
recorded under the conditions is Copy-one-generation. 

[0261]When a CGMS-A signal is included in the analog content supplied to input- 
and-output I/F140 for exampleThereforeanalog content is judged [ that it can 
copy later and ]when a CGMS-A signal is recorded with the contents at the time 
of record of contents and the CGMS-A signal is Copy-freely. Analog content is 
judged [ that it cannot copy later and ] when a CGMS-A signal is Copy-never. 
[0262]In Step S816when contents are judged [ that it can copy later and ]it 
progresses to Step S817and input-and-output I/F140 outputs outside the analog 
signal supplied there as it isand ends regeneration. 

[0263]In Step S816when contents are judged [ that it cannot copy later and jit 
progresses to Step S818and input-and-output I/F140 is outputted outside in the 
form where analog content is not copied to the analog content laterand ends 
regeneration. 

[0264]Namelywhen copy control informationsuch as EMI recorded as mentioned 
abovefor exampleis No-more-copies (or) Although the copy control information of 
"Copy-one-generation is recorded in a systemwithout changing into No-more- 
copiesThe rule of treating as No-more-copies" is decidedand when copy control 
informationsuch as EMI recorded under the conditionsis Copy-one-generationas 
for contentsthe copy beyond it is not allowed. 

[0265]For this reasoninput-and-output I/F140 adds the GCMS-A signal with 
which a macro vision signal and Copy-never are expressed for analog content at 
itfor exampleand outputs it outside. For examplealso when the recorded CGMS-A 
signal is Copy-neveras for contentsthe copy beyond it is not allowed. For this 
reasoninput-and-output I/F140 changes a CGMS-A signal into Copy-neverand 
outputs it outside with analog content. 

[0266]As mentioned aboveit becomes possible by performing record reproduction 
of contents to prevent the copy (illegal copy) besides the range which contents 
were allowed from being performedperforming copy control of contents. 
[0267][Composition of a data processing means] Software can also perform as 
well as in addition performing a series of processings mentioned above by 
hardware. That isit is also possible tohave composition performed by making a 
general-purpose computer and the microcomputer of one chip execute a program 
for examplealthough the cipher-processing means 150 can also be constituted as 
encryption/decoding LSI. TS processing means 300 can perform processing with 
software similarly. When software performs a series of processingsthe program 
which constitutes the software is installed in a general-purpose computerthe 
microcomputer of one chipetc. Drawing 35 shows the example of composition of 
the 1 embodiment of the computer by which the program which performs a series 



of processings mentioned above is installed. 

[0268]A program is recordable on hard disk [ as a recording medium ] 2005and 
ROM2003 built in the computer beforehand. A program Or a floppy (registered 
trademark) diskCD-ROM (Compact Disc Read Only Memory)It is temporarily or 
permanently storable in the removable recording media 2010such as MO (Magneto 
optical} diskDVD (Digital Versatile Disc)a magnetic diskand semiconductor memory 
(record). Such a removable recording medium 2010 can be provided as what is 
called a software package. 

[0269]Install a program in a computer from the removable recording medium 2010 
which was mentioned aboveand also via the artificial satellite for the digital 
satellite broadcasting from a download siteVia networks [ **** / transmitting to a 
computer on radio ]such as LAN (Local AreaNetwork) and the Internetlt transmits 
to a computer with a cableand in a computerit can receive in the communications 
department 2008 and the program transmitted by making it such can be installed 
on the hard disk 2005 to build in. 

[0270]The computer contains CPU(Central Processing Unit) 2002. The 
input/output interface 201 1 is connected to CPU2002 via the bus 2001. 
CPU2002 via the input/output interface 2010 by a user. If instructions are 
inputted by operating the input part 2007 which comprises a keyboarda 
mouseetc.according to itthe program stored in ROM(Read Only Memory) 2003 will 
be executed. 

[0271]Or a program by which CPU2002 is stored in the hard disk 2005A program 
which was transmitted from the satellite or the networkwas received in the 
communications department 2008and was installed on the hard disk 2005Or the 
program which was read from the removable recording medium 2010 with which 
the drive 2009 was equippedand was installed on the hard disk 2005 is loaded to 
RAM(Random Access Memory) 2004and is executed. 

[0272]TherebyCPU2002 performs processing performed by the composition of the 
block diagram according to the flow chart mentioned above processed or 
mentioned above. CPU2002 the processing result and via the input/output 
interface 201 1 if neededlt is made to record on an output or the transmission from 
the communications department 2008and also the hard disk 2005 from the 
outputting part 2006 which comprises LCD (Liquid CryStal Display)a 
loudspeakeretc. 

[0273]The processing step which describes the program for making various kinds 
of processings perform to a computer in this Description herelt is not necessary 
to necessarily process to a time series in accordance with the order indicated as a 
flow chartand a parallel target or the processing (for exampleparallel processing or 
processing by an object) performed individually is also included. 
[0274]A program may be processed by the computer of 1 and distributed 
processing may be carried out by two or more computers. A program may be 
transmitted to a distant computer and may be executed. 
[0275]Although this embodiment explained as a center the example which 



constitutes the block which performs encryption/decoding of contents from 
encryption/decoding LSI of one chipThe block which performs 
encryption/decoding of contents can also be realized as one software module 
which GPU 170 shown in drawing 1 performsfor example. It is possible similarly to 
also realize processing of TS processing means 300 as one software module which 
CPU170 performs. 

[0276]As mentioned aboveit has explained in detail about this inventionreferring to 
specific working example. Howeverit is obvious that a person skilled in the art can 
accomplish correction and substitution of this working example in the range which 
does not deviate from the gist of this invention. That iswith the gestalt of 
illustrationthis invention has been indicated and it should not be interpreted 
restrictively. In order to judge the gist of this inventionthe column of the Claims 
indicated at the beginning should be taken into consideration. 
[0277] 

[Effect of the Invention]As mentioned aboveas explainedwhen the Information 
Storage Division device records data on an information recording medium 
according to the composition of this inventionan own digital signature and public 
key certification are recorded with data. By thiswhen recording informationproof 
which recorder recorded was also always recorded with data. It checks that an 
information reproducing device checks the justification of a signature and a public 
key certificationand specifies a contents recording person before the decoding 
processing of contentsand there is no alteration of a public key certification and a 
digital signature in it. By this compositionefficient exclusion of use (reproduction) 
of the record contents by an inaccurate recorder is attained. Since it can specify 
which recorder recorded it even if the recording medium containing the data 
recorded unjustly circulatedexclusion from a system can be performed. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a block diagram showing the example of composition of the 

Information Storage Division playback equipment of this invention. 

[Drawing 2] It is a figure showing the example of the public key certification applied 

in the Information Storage Division playback equipment of this invention. 

[Drawing 3] It is a figure showing the Data Recording Sub-Division process flow of 

the Information Storage Division playback equipment of this invention. 

[Drawing 4] It is a figure showing the data reproduction process flow of the 

Information Storage Division playback equipment of this invention. 

[Drawing 5] It is a figure explaining the data format processed in the Information 

Storage Division playback equipment of this invention. 

[Drawing 6] It is a block diagram showing the composition of the transport stream 
(TS) processing means in the Information Storage Division playback equipment of 
this invention. 



[Drawing 7] It is a figure explaining the composition of the transport stream 
processed in the Information Storage Division playback equipment of this invention. 
[Drawing 8] It is a block diagram showing the composition of the transport stream 
(TS) processing means in the Information Storage Division playback equipment of 
this invention. 

[Drawing 9] It is a block diagram showing the composition of the transport stream 
(TS) processing means in the Information Storage Division playback equipment of 
this invention. 

[Drawing 10] It is a figure showing the example of composition of the block data as 
additional information of block data processed in the Information Storage Division 
playback equipment of this invention. 

[Drawing 1 1] It is a tree lineblock diagram explaining the EKB message distribution 
processing to the Information Storage Division playback equipment of this 
invention. 

[Drawing 12] It is a figure showing the example of EKB used for the key distribution 
to the Information Storage Division playback equipment of this invention. 
[Drawing 13] It is a figure showing the example of distribution which uses EKB of 
the medium key in the Information Storage Division playback equipment of this 
inventionand the example of decoding processing. 

[Drawing 14] It is a block diagram explaining the encryption processing at the time 
of the Data Recording Sub-Division processing which uses the medium key in the 
Information Storage Division playback equipment of this invention. 
[Drawing 15] It is a figure which illustrates the example of generation of an 
applicable disk inherent key in the Information Storage Division playback 
equipment of this invention. 

[Drawing 16] In the Information Storage Division playback equipment of this 
inventionit is a figure showing the example of generation processing of an 
applicable title inherent key. 

[Drawing 17] It is a figure which illustrates the generation method of an applicable 
block key in the Information Storage Division playback equipment of this invention. 
[Drawing 18] It is a block diagram explaining the encryption processing at the time 
of the Data Recording Sub-Division processing in the Information Storage Division 
playback equipment of this invention. 

[Drawing 19] It is a flow chart explaining the processing which generates the 
signature to enciphered content in the Information Storage Division playback 
equipment of this inventionand performs Data Recording Sub-Division. 
[Drawing 20] It is a figure showing the example of composition of the enciphered 
content recorded in the Information Storage Division playback equipment of this 
inventionand the table which manages correspondence with a public key 
certificationa signatureetc. 

[Drawing 21] It is a flow chart explaining the processing which generates the 
signature to a title key in the Information Storage Division playback equipment of 
this inventionand performs Data Recording Sub-Division. 

[Drawing 22] It is a block diagram explaining the decoding processing at the time of 



the data reproduction processing in the Information Storage Division playback 
equipment of this invention. 

[Drawing 23] It is a figure showing the example of composition of the 
RIBOKESHON table used in the Information Storage Division playback equipment 
of this invention. 

[Drawing 24] It is a figure explaining the processing in the case of carrying out 
applicat ion ** of the EKB distribution tree in the Information Storage Division 
playback equipment of this invention at the inspection of a RIBOKU device. 
[Drawing 25] It is a figure showing the example of a format of applicable validation 
key blocks (EKB) in the Information Storage Division playback equipment of this 
invention. 

[Drawing 26] It is a figure explaining the composition of the tag of validation key 
blocks (EKB). 

[ Drawing 27] It is a figure (Example 1) explaining the EKB tracking processing for a 
RIBOKU entity judging. 

[Drawing 28] It is a figure (Example 2) explaining the EKB tracking processing for a 
RIBOKU entity judging. 

[ Drawing 29] It is a flow chart explaining the EKB tracking processing for a RIBOKU 
entity judging. 

[ Drawing 30] It is a flow chart explaining the processing which verifies a signature 
in the Irformation Storage Division playback equipment of this inventionand 
performs data reproduction. 

[Drawing 31] It is a flow chart explaining the processing which verifies the signature 
to enciphered content in the Information Storage Division playback equipment of 
this inventionand performs data reproduction. 

[Drawing 32] It is a flow chart explaining the processing which verifies the signature 
to a title key in the Information Storage Division playback equipment of this 
inventionand performs data reproduction. 

[D rawing 33] It is a flow chart explaining the copy control processing at the time of 
the Data Recording Sub-Division processing in the Information Storage Division 
playback equipment of this invention. 

[D rawing 34] It is a flow chart explaining the copy control processing at the time of 
the data reproduction processing in the Information Storage Division playback 
equipment of this invention. 

[Drawing 35] In the Information Storage Division playback equipment of this 

inventionit is a block diagram showing the processing means composition in the 

case of performing data processing with software. 

[Description of Notations] 

100 Recording and reproducing device 

110 Bus 

120 Input-and-output I/F 
130 MPE G codec 

140 Input-and-output I/F 

141 A/Da D/A converter 



150 Cipher-processing means 
160 ROM 
1 70 CPU 
180 Memory 
190 Drive 

200 Recording medium 
210 Recording-medium I/F 
300 TS processing means 
600607 Terminal 

602 Bit stream purser 

603 PLL 

604 Time stamp generation circuit 

605 Block seed additional circuit 

606 Smoothing buffer 
800806 Terminal 

801 Block seed separation circuits 

802 OLtput controlling circuit 

803 Comparator 

804 Timing generating circuit 

805 27 MHz clocks 
901904913 Terminal 

902 MPEG video encoder 

903 Video stream buffer 

905 MPEG audio encoder 

906 Audio stream buffer 

908 Multiplexing scheduler 

909 Transport packet coding equipment 

910 Arrival-time-stamps calculating means 

911 Block seed additional circuit 

912 Smoothing buffer 
976 Switch 

1001 Version 

1002 Depth 

1003 Data pointer 

1004 Tag pointer 

1 005 Signature pointer 

1006 Data division 

1007 Tag part 

1008 Signature 

2001 Bus 

2002 CPU 

2003 ROM 

2004 RAM 

2005 Hard disk 



2006 Cutputting part 

2007 Input part 

2008 Communications department 

2009 Drive 

2010 Removable recording medium 

201 1 Ir put/output interface 
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[0 0 0 8] LA^Lft^S, DVD-R OMT'Sfflftl 

1\ ROM^tVT 7 ^?) a— y 

[0 0 0 9] Ul-B, ROM^x-< 7 , ^8Basnf=T r -i £ 

cDSS^as, R AMp'TVT'lcakr-Lfdi-g-Kli. ^ 

HUKtfMW * C 1 3^T'*T L* 3o 
[0 0 10] ^CT% *tUSIAl±, ftttttlfttK ^ 
¥ 1 1 -22446 1 ^ii$g (WMip 1 0-2 5 3 1 0 

iB@«s#icfB^L. ca>JS»«8ijit«fl!>5-r-b>x*fi 

[0 0 1 1] C©73^Tt±, IB«i*±<07 ? -*«:, « 

««ailiWii:5-r-b>7*af**cticj;yfi5hatt 
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ttiL/c.hLTts m^cofc^x-^fcff^c: 

fig, *IE&*Sii! (jS^ntf-) #T*3r&^<i;-5fc, 

[0 0 12] 5-f-fe>X*gttTU&l/>BBW:, )KHi 
SUtilfStc ^ -t x "Ts BttBHjfltSttfl*® 

TL*fcl*BBtf» IEB«ttteI3B*ftTl/>S. HHMt* 
ftfcx-^OT^TfcBfeftKBBfttcBBLfei LT 

[0 0 1 33 iC5T', ±E<D*J*li:fe^7'tt. 5*f-fe 

>z*mitcmw.icts^zmttetiz-*x*-*-it± 

BBtC j5U>T*a?**©tf — (iSWT-S^o CCD <fc 5 tc 

ctr* (-tv*-**^ try ^-r *»«■*-*) tztb\z& 

[0 0 14] LfrU ccsaicfii^tt. *B*tfi 
-fcfrfcfcfcOiSBBU ft»tCHLfc*«Ji(^.©^« 

tea*. cco«u?E*ii3K-r*- mmmnrts&.£L.T\£. 

iff fc a "7 7. £ - * - £ <I % CO a" -< X * - "C? b L ft 

*.S*i*tf* «B©«WcJtflLTeaST' , C*£*v-fe 

[0 0 15] ±EHl«IISkr«Mlt& LT« *J±JSiA 
lis £1fMBB&£Sfl£n#*4>£X OJ-7) KE 

a Lfc«j«<o«B3flttr3S*fflt\ ibbsw t l < wwi 

L<te§EB«{*« t S©B£fc#B:5:B (77£-*-fc 
L< Ity 1 *r-< T-f-—) BEBU Cft*Bl/»T#BBtf 

IES£ (&S#SBL7V&ltgB(c) *tLT'J> 
Bl** y Hz— 7BT^?7x*-*-fc L< T 7 *- 

IH^F 2000-105328) LTl^. StttfHCte, 
IBB8<*'vC0iBiit> L < ttiBBBttfrSOWSEfci&Efc 



*3E*fy-K*-£LTSJ£U E&rT- K*-*iEB 

ftBB?Bg^btt«L7HlHi*Bfc*«Hb*-:7ny* 
(EKB) *&BttEBB£&BKEBU S8rtb*- 
:7P>y? (EKB) *BBLfc#tiRBSBS?f££BcDE 

k b SQatc «fc y » &£B#gBB t, l < ttiBB&ttfr 

[0 0 16] 

It. m®i?mS.LtcgiW&->X : rL>fr<Z>t}m?Z>Z£lt 
pJB?**#, C©fc»U:{4£<OgBcD»BtfSmLfc 

TSKWtr&IB L * □ - > t-f 7 tff* 5 tu ?7 7^ 

*»**ifc»B#BB**u SO^AfrSBBSftSE 

[0 0 17] <bc:3T\ ->7Ti;l:St5?!8ifji5 
4\ ±E©*3(c*n-:/TVf«f';i:6WS*iTa*:b* 
C9Tiifc<s &3ffttEB£B*&£LT, fc£it«* 

CDs *IE£iSB£f5*>-eT, *<0tt»f*5*ifc* TIElc 
SB* tifcr- * «B&EB«1t*Eftr S & f«frB 
ffBfcSft*. CCOJS^, ^OEBBBfcx-^STiE 
teEBLfcBfitfBBTSfiHr* *ti*5/X?^*»SSP 

mu SrLcpvxvyx-^^^-flDSiBTtta^H* 
[0018] *»«tts ±ascop>gsg*»)?ir* i tcoT£ 

y. W«IBB£B#7 r --$*ffaiBBBttKIBBr«ft 
U:S#©x^^;UB*fc«fetf4iBi«aE«B*7 r -^i« 
tcfBaSL, tS?8B^E* ,t ^-^^gE*.t±l-r^tc±IB7 :r 
^;UB*fiJ:tf4SBBIEIIBflDjEaiS*BBLfeBlc 

RiS6<b r * ^ A*s«-r * c t z i m <t r 

[0 0 19] 

IBB«#frSif«*B£T*iraW£8Btefc^T» B 

Eiawt#t=*fttt*tifcflHWb3>x>yiBB*#<!!)a 

NBEE«B<OBEEaS«B^Ls iES1«t©«g?tlfc45 

LT. BBBLfeaMBtB-^UTs 3>yVVEBi 
ftO^^^^BiOBBEJOaSBffL, R£EE<0&«. 

5 1 > y ©a#«a*Bif r * c i *w« t r * « $bs^ 

KBICBS. 

[0 0 2 0] *»W£0«S»^BB©-BBB 

«^cfcl^r, BEnmB¥B(t % ir£§BBB»(c»M 

&&£tltc P> 7 1 > '7 BB^ftcOxv*^ ; l/5a CO^SESQ 
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[002 1] 5 etc, *^9^©1t5l8S^gffi<D-HfiE<ll 
LT4«*tirc3 V^>Viai±#fl!> 

[0 0 2 2] SSK. *BH®nmi5££fl®-It£tt 

gBKrtilLfc*-f;:Scft^T*- , ;/U-©/<U±©T 
tt*- <fc *±ffi*-©B»fb»«7 s - ^ 6- 6 S-5*r$b 
it*--7a'y* (EKB) ©a«*HfTLTiJEfB«« 

[0 0 2 3] *«f?l§©1t$gS£gB©-ftSS!tg 

[0 0 2 4] * 6tC, *«*0«20fflffitt» iESStt 
«*B**U ;SPf^5aS¥ISli. S5iB««a>f>y 

[0 0 2 5] *5fc s *?8BJi©flS$B§BligB©-|ISSitg 

■r*«ij***r-sci:*w«tr*. 

[0 0 2 6] *56E©fllSilB8SB©— 
*(£fc^Tv i38BIS^«ffl#®tt, IMBIBIRfllttrcttM 
rSBg-§-fka> ; r>y03>x>"y***3sffti: LT3 
Vx > y I BSii'l*© 9 V* ©£j5fcffl3*3lff u 

[0 0 2 7] J SIC, *fra<8lffMB£«B0>-&ffliB 



[0 0 2 8] ?6(C, *#g0E©1t$B§EtggB©-ftMt 

y- K(cH*®y- K*-£*1t«ElKSBII*flDy- 
U BufBBi^$[i3I#!£tt. SuiB1H?8IB^ 
gBfcrtjSLfc*-K»r5^T*-yU-©/\°X±©T 
«fc*±ffi*-©«Wk»S5*-*frSft*«tt 
it*-7ny9 (EKB) ©a»*JH5LTKfflBIB«ll 
ttKteSft?- £ * ©Bt^k«iau:i0S3S:8g^fk*-^ 

[0 0 2 9] *Sfcs *$£fE©1i$8IB8gB©-£;&&IS 
[0 0 3 0] *SCC, **W©m3©«ffit±, IBlHMt 

ttfctfttt* tifcflWk^ >y vyia«±#©45iii«iEW 

SW^SE^S^H^-rS^llSliEB^^fiEXT 1 y 7<k. 
IEai4©{tiS*nfcii^SSEB^*fr6fij|B=]>x> > yfB 

T» =1 > x > Vl?M±te-V)9-J$) U** ©«tBQ3£ H 
&r«1MI!*££9clcft«. 

[00 3 1] SSIC, *»W©1«iS<fc:£2f©-§SJWg 

t 1 * Tit. sre^asff teiaw^nfcBg^ka >^ > v 
©□ >x *m&n&t Lz^mztitc □ >x >ye 

BttEEQttA* «*<OiEStt#«tt;!rftfcz:i:* 

&#<k \~T^^it^>9>v<»'&^vm.*5m-?%zt 
*if»tr*c 

[0 0 3 2] SSlC, *ft«®flH||!££34)-£ttgtt 

9u7it. miEe»«<«=iMASftfcBw<k:3>x>y 

tSlfitiXryTttan, ttKEEOlSJII, **©IES 

[0 0 3 3] *6lCv *«W©1tffll?£&a<0-||JtJB 

m-^y- KlcH*©-/- K*-t*flHB»ftBBH 
»©'J-7*-«I^T, mMt*-7nv? (E K 
B) flDB^BffLTWEIBBJlftlcSSttShfeBWx 
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[0 0 3 4] *»*0)«4©ffllB6f*, IBSJSft: 

sx^y:^, hu SBft w =1 > 7 1 > ^ rof aas±<*© 7^ ^ 

[0 0 3 5] UrSK, *Aqi<DHmiB««S0!)-ISttffi 

[0 0 3 6] * SK, *!8W<Dltai3«^aSfl!)-56JBI6 

tt£tt*flT£BB*fbP>x>U/©3>^>y*S:&fct* 
<b LT3>?>'yiB«£<*©7^*;U*£©£#fflWi3£ 
HSU *J«Lfc»***Mfi3>x>yi!:»(Bftr^T« 

[0 0 3 7] JSlCv *»W©flBBIB«*a£©-||jai 
§u§B1f«iBS^W:, JSU:, fufBIBSSjg 

[0 0 3 8] *SK, *^^<7)tf$8IBfi^^©— H5fe«g 
«Stcfcl>T, 85itB11HISBiSWS£tt, SSlc, fulBUNBIE 
«£■(:: ^»Lfca»©J|«:*flraifB«««* 'J -7t 

*«Mb*-^ny^ (EKB) LTfTEIE 

-ass x - * tut set <t 

[0 0 3 9] jse, *f|^©SB 5 cWHBfi, flNUba 

<*OiiKI8E0^it <b , BuEIB»^<*©5 r v ; ^J US* <h £ 
«M«L7S:Ct*1t«<b-r*11faiBf»iW::**o 
[0 0 4 0] *SKU *^©^$g§BSgjgft©-H]H6!tl 

[004 1] J6IE, *&«4>«6 4>fl!lEli. RIHlttt 

* x stfS^ssir^tSfBS*jais^=]>tfa~$f • ->x 

Lfe^n^5AEttHlIf*?*-3T» SulB=l>t:°i-$ • 
5Att» i5IBS«af*tctttt*tifciig^b=i >x 
>U/fB»±i*©iiBBaiiEI«»(D«gE«31*||ff-r*iill 



^^;u5*©«sE«a«sie-r stc&ee*? * 7<b, 
*wrsct*itafr5^a^5AiBtt«itt:fc 

[0 0 4 2] *Sfc, 7 ©fflffitt, fE^iSt* 

»c»LTlf«l*Elir*fWBIBIW03a*3>ea-5t • 

*aWLfc^P^AfB1©flHtT*fioT, BufB=]>tfzL- 
* • ^n^AW:, IBIWi#t!:*«Ar«a>y>">©Pt 

^rasjifrrsHHwyiXT 1 ':/^ wiaiMfla;' 

x > y ©I B® 7V* I US* £ ^fiE-T £ X t 1 u> 7 

^AKWKttcS*. 
[0 0 4 3] 

ffl!B»«i*{::BB»-rsi«{c:g#fl!)7 r v ( 4»;USfi*ja;tfii 

rictus nHg*fB«-r*pgii:tt. #r, <b~©fB®sia 

LTt^©7\ t L^FiEtrfBSS-tlfcx— 5fS-^feia@J 

«w*tfSBi Lfc <t Lit, ^oewantfEtt l 
[0044] arsic mmm^mtfr—st^tw^mr 

[0 0 4 5] 

^iSffl LftBMSi 1 0 0 ffl— «*«M«fiB*wr ^ 
□ 7^B?S«. IBSSSgSl 0 0(t AttS73l/F 
(Interface) 1 20, MPEG (Moving Picture Experts 
Group) P-x->^ 1 3 0. A/D, D/AZIV/N*-^ 
1 4 1 *«*fcAaj7J I /F (Interface) 14 0, Bg^- 
®S#IS15 0, ROM (Read Only Memory) 16 0, 
CPU(Central Processing Unit) 1 7 0, ^t"J 1 8 
0, SB8J8#2 0 0<&§B«8l'f*'f V*;7x-X (I/ 
F) 19 0, f>5>X#-h • 7. MJ - ASag# 

is (Tsias^s) 3oo*su cnsti/t:xi 1 o 

[0 0 4 6] Atti7J I/F120I*, fl-35frS#«S**l 
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fcxS^IHS^gfSU /Ul 1 0±tcttj^)-r-S<!:i: 
tic, MA1 1 0±©7 r v f *;M!**Sff U fl-SBteiti 

^■T^c MP E GP-t^? 1 3 Oli, AX 1 1 0£t> 
LTttBSftfcM P E GffftkJhftf-**, MPE 
GxU— KU AtH^J I /F 1 4 OlCili^-r^xbit, 
fc, AW* I / F 1 4 0A>6«*g?n^7 J ->^yUft^ 
MPEGXVU-FLTMX1 1 0±KttJ7rr3 < , AtB 
73l/F14 0te\ A/D, D/AU>M"-£ 1 4 1 £ 
fllLTl^. AJii7D I /F 1 4 0(i, ^gPft^S^Hig* 

D, D/A=1W\"— £ 1 4 1 T-A/D (Analog Digital) 
«»r*Ct7» T^/WB^LT, MPEG3-7 
1 3 0^*2)3" -5 title, MPEG3-f'^l 
3 OfrStDxv^/WS**, A/D, D/A3>-/\*- £ 
1 4 1 T'D/A (Digital Analog^&T^C tT\ T± 

[0 0 4 7] Bg^5Qa#IS 1 5 0 It. 
®LS I (Large Scale IntegratedCurcuit)!?^^* 

rS^rtHlWWWtu SfcUflwu 1 o± 
fcthJr?zmi$,z&-D I> Bg-§-ais^ie 1 soiii 

K 1 ? x T'fctt^tott J: oTJIBr * C £ t, pf 

[0 0 4 8] ROM16 0H lEiiH^gEC- 

[0049] zr.T\ xmmmwwiz. ®2icmr&o 
y m lt*jbt*> z 

[0 0 5 0] CPU 1 7 0 fix SOfclBBSft 

rcyp^^si^-r^ciT-, mpeg^-77^1 

3 0^qH§j09¥«1 5 0B*fti»r*. **'J 1 8 0 

fix ^»«is>^yp % cpui 7oa^t-t 

57n^7A^P, C P U 1 7 0 ©t&ff ±i&g & 7^- £ £ 

x-^siawiaLRFiBftiBiHn* 200 ^ueki-*, c t 

Kcfc'J, 8B»IIft2 0 03b^7 r v ; 5;U7 r -55-S63b>.tiJL 
(SSL) , 1 0±Kti#rf-:5££fctes /U1 



1 OS^-LT^tlSS-n*^*^^— IB*S&ft2 
OOfcttBLTEB***. 7P^7A*ROM 

1 6ok, f/t-c^t-is^ty 1 8oicfBttnr*« 

[005 1] IEtiiSft2 0 0(i, DVD, CD 

•©flfiTM-**, TasmxVx*, bjktVa*, as*. 

7—7, S^LMiRAM^^flt^t Vmebzr&jtfr 

•BftYV^x-XI 9 0tcWLT*8«prt6SffifigT- 
S*£T*. fflU ffi»«ft200tt, IB®S*g»1 
0 0 (crtXr«ftrt£ LTt»<tt\ 
[00 5 2] f>5>A<K-h -AMJ-A»S#« (T 
S»3#») 3 0 0&, ffcaKcfe^THtffifTIWfflte 

so tf^Bft^n/b h?>A#- ka h u— Afrswe 

'J - -f 5 >?WB«*/f4- •> h 1 1 t rciBB 
*®ft2 0 OlctttAfSfcttCx- 5f5QSfcJ;t>\ IB^® 

ft 2 0 0 * % e©g^jias^©ai3Ei5 < = yymw&m* 

[005 3] K^^XjK-hXh'J-AKtt, 
X#-h/*7-«> r-01ii3Ei5-r~>-?'tg?8<t:LTc3DATS 

(Arrival Time Stamp : MiSmMT.'S' >7) ^Stm^tl 
TfcU, 'TS^liM P E G 2->^7AXT*JiS 

^nTL^5{5aet|^:7 r =l-■5^ , 7•S« T - S T D (Transpo 
rt stream System Target Decoder) : £5&i£3'-ti&l'» 

cfe -5 K&^ftBSuisfe^a-tu h 5 >x#- r- a h y -a 

ATsicfcoTiasi^'rsvirtiMBr*. h^>x# 
- h • x h y-^«ra*« (t sffls^s) 3 0 o«, 

» r-*!B8SlftKiBtrt£ii^;:tt, h^P^SS 

y - A^s#ift ( t s saa^s) 3 0 0 d v d 

I3gJIft2 0 0'\©x-5fBSPStc, S(^7>^-h 
/\°-7->y hCA^-fSV^atATS (ArrivalTime 
Stamp : %{5l*mx<$<>Zf) tftfttl LTE«T*. 

[0054] *»w©Stta->Axz*tcijtNTsaa 

>x#- hx h y-A^cx-^icBi-rsjas^ns 
BHc«rTsioa#a!«:j&rLtnEait 

[0055] vt—. zimym&x.T*?-- 9m^m 
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#2 0 0 KIEtrr-Sif -g-Kfel^-nis 03 (A) 057P 
He Lfc#ofciBIS»31#m>ft*o BP'S, x 

IEEE(lnstitute of Electrical and Electronics 
Engineers)1394>'U7';UA7.^i>LT> A Si* I / 
F 1 2 0K«ejft*i, ZryZTS 1 1 fcfctvr, A 

a* 1 /f 1 2 oi*. sti&^nsx^^niy^^'y* 
§«u mxi 1 o^/rLT, Tsais#a3oo*/c 

[0056] SMix-*^ h 5 hXh'J -A® 
a*«Btf*«*W:. TS*a3I#!S3 0 0Kfc^Tr- 

h-7h y-^aa^sffi-ti*. t smm 

#S3 00(i v Xx-y^S 1 2tCfcLNTs h5>X«K- 
TS4HH0Lfc7ay*7-**£jSLT, M*X 1 1 0 

[0 0 5 7] Bt^jOS#Sl 5 Oli, Xf7/S 1 3 Ic 

tei^Tv eflLfc^^pv^V'yKttT^Pi^biQ 

XI 1 0^LT> IBMffitf l/F 1 9 0 tetter*. 
BWYbaVx IBHSIff I/F19 OS^LTE 

MSB* 2 0 OtcfB^ (S 1 4) ?*U 13*403**7? 

So 

[00 5 8] ft&\ IEEE1394->iJ7»^/^*^LT»l!S 

Z\ 5CDTCP(Five Company Digital Transmission 
Content Protection) (Ji<T% ftSU D T C P <tl/*-3) 

jS ? j£a&S*iti/»*#, ccddtcptu zitf— 7g— 
**J»r 3 fctt © =1 e-#J»1Hi*iE L<WJ$kz.2>fr 

[0 0 5 9] ciDDTCPlCiK^S^X 2 Sgfl 
fcfcl^TMu ^-^BflMBODAUia I / F 1 2 0 lis X 
?'>^S1 If, IEEE1394->y7»;UAX*fl>LTHHSfb 

a>T>y««tu f-oflHWbav^w*, dtc 
PK«*Hc*»LTfMU TXrozi^x^'J/iLT. 

BfWl^BM 5 0(Ct±J*-T-5o 
[0 0 6 0] DTCPK«fc*5 r 5>*;U:3>x> , .V<DPW 

*>*i*. iWfbfctifcxS^jl/av^vvtts 
fbKflil/'fc*— S$*6T, I EEE1394-> "J 7 , ;U/\"7.±$'fi 



astu gfl«T»u: s ^^titiTc^'J^iu^y^yy 

[0 0 6 1] DTCPfCfcfttf, lEJtKMu *- 

> 5 1 > V K # It tl -5 7 5 £ -f = > y T l S M L T 10 < 
£I<!:T\ B»fb(c/il/ k 5;h.fc*-tf£jas*u BS^fba 

£olZ%X2> 1 t><Dt?2>o Z.Z.Z\ DTC PtCOI^T 
t±x 0y*.#\ http://www.dtcp. comt7)URL (Uniform Resou 
rce Locator) T*^**^ We b^— 5?U:fct*7\ -C> 
7^-y'Ci>3^-;U/<— -J a X Informational Version) 

[0 0 6 2] ^aJA^ScDT'^n^l^cDrJVxV 
i y«-s S««.ft:2 0 0lcgB«r*«^0!)*SM:o^T, 
B3 (B) ffl7a-* + -HEffi-3TBMIlT*. T'^-P 

l/F 1 AOlc^JgJtL^,!:, Mftfy \/f i 40 |i, 

^T7 7s 2 1 tcfc^Ts ^cztn^avfvyss 

flU XT7 7"S2 2(Cji^ rtjg-T^A/D, D/A 
=]>A-^ 1 4 1 TA/D$&LTs x^^yl/fl^cDzi 

[0 0 6 3] CtDx-^^PV^Wt*, M P E G3- 
7 r ->-5' 1 3 Olzm^tl. Xf77S 2 3tCfc^T, M 
PEGIVU-Kv tSfcSMP E GBBlCtS^^fb 

5 OfCt^iV^ 

[0 0 6 4] J-XTs Xfy7S2 4 1 S2 5, S2 6tC 
fcl^T. 03 (A) OXrvys 1 2 X S 1 3, S 1 4 

?*tll*TS«31#«3 0 OlCfei. r-^VX^K- hM> 
h (C^r* A T Sf>tSP % WHH^l 1 5 0 U:JJ(t* 
BWfb«Stf*fT**U ^OttJRWSti^BHMbaVx 

E«w*2ootciaiLT» ie^s*iiti7-r 

[0 0 6 5] ^tC, fB»«»2 o otciess-tifcnvx 
yy&ns.LT, y^iuav^vx fe^.LMiT'-T-p 

7J-r*»attH4 (A) c7)7P-^^- MCLfe3B«ofc 
3 1 Kfcl^Ts fBSS«tt: I /F 1 9 0tCJ:oT. IB 

8^42 o oiciaHitifcBHFbavxvytfll*^* 

tU /U1 1 0 5-^LT> Bf*5aS|#Sl 5 0tCtH7J* 
[0 0 6 6] Ba^iQS^Igl 5 071*, X777S3 2 
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hy-AT-«**$t±. a«7-*tf/ui 1 o^l 

Ts TStoSf'lft3 0 OlCtli^?tL> Tssra^sraf© 

n^Ama i / f 1 2 0 

[0 0 6 7] TSfiaS?ie300(i, X7^y7S4 3H: 
fcl^Ts h5>X#- h-X M;-A£«5rr*£-r--5> 

Y-li'rv (-©AT SA^Jli^^-<5>^fiJS 
U ATSteJ6;Ufc*JlSl**fTLT» /U110S^L 
Ts Ati37J I / F 1 2 Olc«WT*. Afcb73 I /F 1 2 

on TS&g^|g3oofr6©xv>$;uzi>7 1 > , .y 
^ «.awctt*u jS£«ui£*£7-r* 0 s&\ tssq 

[0 0 6 8] ZZlz. x-^l±Atil7J I/F12 0IC1 
*&**U Xr7^S 3 4Kfcl^Ts Atti7J I /F 1 2 0 

[0 0 6 9] AtU* I / F 1 2 0 (is 7.=ryZfS 

3 4 T\ I EEE1394-> "J ^I/KX^LTt^/IO >x 
>W^-t±l±J-r^ tS-g-lCti. DTC P^glteKWLTs 

[0 0 7 0] iSitiJ8tt2 0 OtC|B«**lfc3>y>y* 
SlCisi^Tlt. 194 (B) ©7P— t-lZ'&^tcW 

SEjumtt&bti*. 

[007 1] BP '5s ^f77S4 1 t S4 2 x S4 3(E 
fcUTs 04 (A) ^7y7S3 1, S32« S3 3 

Us Bg^ias^iai 5 oicfe^THSftfcawartifcx 

S?*lP3>5r>ytt» ;\"X1 1 OfctfrLTs MPEG3 
-5*** 1 3 0 {EttfciTifl*. 
[0 0 7 2] MI'EG3-77^ 1 3 0 711 ^777 
S4 4(cfc^Ts xv'-Si/UZiyxV'yA^MP EG?3- 
h\ Tfcfc5ttS»Stf5tf5**U Atfc*) I/F140 
tC«*g*tl5 0 AMJ7D I /F 1 4 0B, X?7 7S4 4 
Kfcl^Ts MPEG3-?7^1 30T'MPEGja- 

AP>/,-*1 4 17D/AM (S4 5) LT, T** 

p^pv-^vy fu, Xxu/7S4 6tcji 
*s AtiJTJ I/F14 0H;, ; ?-©7'7-P-7 _ =l>7 1 > , y 

*s ttSBicasau ssstt3i*«7r«. 

[007 3] [h-5>X#-hXh'J-Z,] 3ttCs 05 

isaaei^ox-^osEais^flDJi/jx^ffi^^p <y 

? (block) it^^BuT'P?^ 1 ?'P y?lt. 1 9 2 * 
X (l-y?X) /C-fr- («AI*X = 3 2) 



[0 0 7 4] fl;ttfMP EG20DTS ( h 
•7vh'J-A) /^7h (18 8;Wh) KATSfctf 
SPLT1 9 2M"-T hiU, *:fx*X<H*4&T1 
tOT-ZtTZo ATSIi2 4ni3 2tf7K!5f« 
WB^Tf- *T*St»s Arrival Time Stamp (*fgB$ 
S>JX^>7) ATSli&M^y r-cTjiffflBsT 

6mm#(DV-t-oo)7nvt (-b**) tefcfc, ATS? 
ttlJDLfcTS (h7^#-h-^hiJ-A) Atvh 
^XffllB^-r^,, *IHIl<D*tj$-p(i % h7V^-h^ 

h | )-^Mr5#7P7^©sificTs/^7 

h Kttini-tifc ats fcJSi^TS-fiDT'p y 1 

[0 0 7 5] ■7>^14<rj»S-5ATS^^TBt^'fkffi 
©?P 7^+-*4fi£t« E £fc «fc y , ?'P -y -^SICS 
**HW*-#£j*S*l*. £ja**lfc7Pv*H** 
-*fflf»T7Py^«<DBg^kjffil*5lff-r«. £fcs 

ic J: Us y *na>WMm*mAT*tctba>Rm 

®&±(omi%ftTmti£v, t-OT—v w&ftm'®} iz 

Us ttStf&ftttK&S. 

[0 0 7 6] Sfcs B5K3,f7*n-y^-5'-K (Bloc 
k Seed) tt, AT S*§€?ttljnlt«T'«*. ?'P-y? • 
->-Ktts *6KATS/£ttT&<s H*«lcwrj:5 
tePfc?-ftJRB1t«(CC I : Copy Control Information) 
fcGraDr*«J*tfR]|6?*S. E©i§t%\ ATSiCC 

i *fflu"»T5 r py^*-*^j«r*«a t tr*2:sttf? 

[0 0 7 7] ^3b\ *«WO«mU:fc^Ttts DVDS 

sp^ox-^ttBg^fb^ti^tfs ms^jBTSic^-rcfc 

^P-y^WTtalrom (rci^H m=8^/c(i1 
6) / U r-ttPg^t^tir^TX (Unencrypted data) 

SQST-SSfctttCBf^aiSx— 5?fi (Encrypted data) 

8/W r-*ffiT*%<s fc&ftUri/K r-*ffiTfl&^5 
&6s m=4^LT> 7n7^->- Ki-X^ODgB^t"^ 

TiWbLT i bJ:i\ 

[0 0 7 8] [TS«Hl#«lEfe^««31] CUT-, A 
TS<0«j6K-3^TW«(=RWr*. ATSU ^(Ct 
sK0^L/=d:-5t::A^ r-^VX^K- V-L>cpcD& \* 

[0 0 7 9] rSte-Ss ^tt'SiSi[©TV^P^i* 
(PVxV'y-) 6^Mfbstn7ch5>^#-r-Xr-U- 
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>y) *«yaLfcw, ^wsxtitisL/ch^vxtf-f- 

JWfclBPHTSWi* (BB7 (a) #gg) 0 F^VXtf-F 
AFy--Mis &h^>A#-h F®iijgi*-f = 
>^tC«»ft**il«*y % CW<5V^(iMPEG2 
v'XxAXdSO/lEC 13818-1)T 5 Si;£*ft7'L'>*(52Btt 
6f3-$f?$5T-STD (Transport stream Syst 
em Target Decoder) *«ttS--l±«:^«t o izft^itmz 

•suns. 

[0 0 8 0] h7VX*- FT. F 'J-AO^BttCti, 
* h 5 h y t^r Hcfcf DP * tlfe A T S ft <fc o T 

««*^s>?:tf»j»s*i*. raoz\ EttMMch? 

>A<K- F/«rj/ h*IB»T*»*tett» F^>Xtf- 
F/«r-y F©A*)2--rS>-7"£«}rt ^j&gtffc^ F 
5>Xtf- h/W* h«DVD«(0lBISntflc(u|B«r« 
BSfcU £F7>A#-FM°>r-y F^AA*^ = 
TAT SfcttiD LTfBSt-^o 

[00 8 1] x'S>'$;U^>$:7i-;zjiI£T-A 
73**1 £ F^yAtf- FX F 'J-A^D VDS?0[)§B&*® 
tt?-££A h U-^x-r T'tClB^-T^ODT SfiflS# 
S3 0 Otcfe^T«fir*»a*IHWr*^Py^H* 
5tfc 6*^6 0 OfrStt, ^^iUttaj^Ox^^y 
— ? i: LT h 7 h ^ MJ - AtfA^lJ ft*o M 

1 Icfc^Ttis l/F12 0S^rLT, 

Aiij7J I /F 1 40, MP EG3-T7^ 1 3 OfcttL 
T«?6 0 Ofr'h h5VX#- FA h 'J-AtfATJlTtl 

[0 0 8 2] F^yAtf-FAhy-Att, fcf>>FAF 
y-A/f— V- (parser) 6 0 2 KA73*;ft* 0 tfv FX 
F 'J - A/ \°— y— 6 0 2li, A7D h 5 > A*- h X h y 
—A©4>frSPCR (Program Clock Reference) 
h*»ajf*o uCT, PCR/\>7 hitt, MPEG 

2 ->^7 AXTJi^JtlTl^ P C R *W*fk*:h.Tl/> 
5/\^7 S?$<3c PCR/t^hlt, 10 0msec 

X#- h/\>-> F#^fllfc£J*-*-«l3£!]« 2 7MHz 

[0 0 8 3] fix 27MHzPLL603CJ)l> 
Ts BSm&Utmo 27MHz^P7^h7 yx# 
-KAKy-AOPCRfcPv* (Lock) *^^ o 
AX$yy&£[£i]S&6 0 4«u 27MHz^D7^ 

*= ■?• LT, 7P-J/? • ~>-F (Block seed) f^SDSK 
6 0 5li x l>7V7<K-h/\^7 h©JISl/tf M#A 
^-•^A'777 6 0 6'\A7JZrn*B§©'?-1'AA^ 
>^*ATSil.T, *0>b : ?>X#-Vli>rv FKtt 

[0084] ATS tlfc F 5 y X#- F / \> •> 

hit. XU--Jyyj < (v7 7 6 0 6£ilo7\ 4S?6 0 



7frs, p§*fflis#si 5otca**tu susTsewr 
*n»»wj«iifT4"tiffc«, nmm* 1/F210 (b 

1) ^LTAr-U-v > '^7 ; 'r7 7 T-*^iB^«:2 0 0 

[0 0 8 5] H7fck AAF^yXtf-FXF'J-Atf 
IB«JM*:fcE»*ti*«fl)«a©«!l*^r. 1217 (a) 
It. »*»ft^P^5i* (py^yy) *lir5 l>7 
>Ad<- h/\>-y hOA±)^fc CCTUtfJtatu A F 

y - A±©w*j*sr^iBMT 1 **. c ©ww* f => y 

A*-F/t<5r«;/ KDATDtt, 07 (a) K^T <fc 3 

[0 0 8 6] 1217 (b) Its 7D7f -->-K (Block 
Seed) ttJjO[H]S§6 o 5 0itl*%zjT-r. 7'P->^ • ->- K 

(Block Seed) f^iP0IS6 0 5tt, F^yAtf- hti* 
y h%lz. f-<Dy\°-7"-y F<DX F y-A±<0B$*!l*3Vr A 
T S ^ffStsVu £ • 5/— K (Block Seed) *f?fJDL 

7. v-A/t^y f>*m*r*. 07 ( c ) uiattflKft 
tcfB^7*-tif=y-A/\^'y h^m-Tc \f—7jVrv h 
It. 1217 (c) tCgVr*3tcHm*ettTlBIWIW«cE 

sfris. c©j:3tciniPi*iS467iair*ctjE«fcy 

[0 0 8 7] H8tt> E»«#2 0 0tC|B»**lfch5 
yx#- FX h 'J-i**»£r*H*OT S4Q3MK3 
0 0 ©fcBUJIfiE^P •> ? 121^ L7^5„ 8 0 0 6" 

ATS^©h7>7<K-hA>7 F6\ 7P7^ • -> 
— K (Block seed) #MEIalR8 0 1 ^A**tU ATS 

iF7>^-h/\^7h^7jliJti5o ^-r = y^ 

^l°IK804li, B£»tfJ*-3 2 7MH z-j7P-><78 0 

5 p y ^ * ■jv^-finca^feBsmitH-iir *. 

[0 0 8 8] B£(DBB$&BS£35l,T, — SS«3<3D 

yF3-n«.o itiSS803ti, ATSiL^-rsy-y^ 

tf»L<4-3fcWs tilA*Jfflls]S&8 0 2t±. ^CDF^y 
A<K— F-/\°>r>v h^MPEG3-f7^ 1 3 O^fctix 
v-'-Sf;UAtii7: I /F 1 2 O^iliA-rSc 

[0 0 8 9] 09(4, A*AV«**IB»II^»1 0 0 
CMPEGa-77^1 3 OtCfc^TMP E GX>P- 

KLTv *6ltTSjlBS#S3 0 Olcfc^T F7VX* 
-hAK'J-i**|f^k-r****i5\r. SEoTI2|9 
lix UttlUMP EG3-T79 1 3 o^Tssaa 
#S3 0 0OP5«ffl«Wi*«H*TSr^Py^iaTas 
*. SS?9 0 16^6ti, ti^I^AA^tlTfcy. 
ftltiMP EGfx^-XVZI-^9 0 2^\AA*n^o 

[0 0 9 0] MPEGtf7 r ?|-X>Z|-^9 0 2{±, A73 
ZrtmmtM PEG tr*7 F y--MC&^fkU 
tl5-/^>7y't:'7 r ^-A Fy-A/<y7 7'9 0 3-^£tJ7D-r 
Sfc> MPEGbf7 r 7|-X>l]-^9 0 2^ MPE 
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-z> 9 o samara. tfx^-T. h y- 

bf-^^^^-f l/P/Btf?^* (picture) © 

AWT?**. Sfc. xP-KSl'AXSV^Hu MP E 
G 2^XxA7:T&S*ttTl^tif$8T-35£o 
[009 1] 43i?9 0 4fr6«s *-x<*«^fi«A* 
JtlTfcU, ^'ftliMP EG*- 7V*I>P — $f9 0 
5^Afh?, MP E G?t--7 : V*X>ZI-^ 9 0 5 
lis A**-f-f*i§*MPEG*- 7-f*7h'J- 
•MCft^fbU *n*/< i v77 9 0 6'\tii^)-r^c $ 
fc, MPEG^-7-rtl>a-^9 0 5tt, MPEG 

^r^B-ffcX-irviL-^g 0 8^ttl^3-r^.=> ^-^V^X 
HJ-.MDT'y-feXa-y h^ti, t-f-ft7U-A 
7*tWZ7 HtiB<bH 

[0 0 9 2] £»bX^v^-5 9 0 8KH tfx*<t 
fbX-Jr^a— 5 9 0 8li. T^-kX3.~y r-lfffiKS^ 

v*#-hy<*y hjc»^br**ss*w»r*. 

BJ*J*»4-r«^Py^**-S. ^LT, MPEG27 
«6JhTl^fi««af a-iTiTil/?* 5 T - S T 

y i»ff*<bfw«iiwB*s«er*. y\>y hft^tuHaflt 

[0 0 9 3] K1WUMW«B# £5**/ Wry h 

©H^* X-Ty*9 7 6H:afflHE4y, Ify^XMJ- 
Ui\ 'jZfr9 o 3*£/t4-y r-«H^b»J»fl!«lc<fcyJB 

[0 0 9 4] HWWJWWtft-T^*/^ 

yh©%&, *-Ty*9 7 6«:b«u:fty, *-7V* 

-^fiO^-x^x-^jtfRaWBatU h5>A#- 
hy<Mry H?^fb»9 0 9"\A73*ft*. 
[0 0 9 5] y^y htt^bffiWPflHIitfP C R/t*y h 
©*§^ f-5>^-h/ \> y h ftm\M 9 0 9(t £ 
MfcX*5>a-59 0 8#6A7J**l*PC R*B»ja 
^ PC R/«ry hZ&JlTZ* y\>y hWHbM&lt 

y h*ftmtL%.^zt*m7F.?2>m-£. 

h/t<5r> h*J^{bS9 0 9^ttffiItA**ti* 



[0 0 9 6] l«7>7#-h/^yH»<bll9 0 9 
tt, iVrv h»*fb*JWWBtfy^y h*13*fbLfti* 
C£*»j5Vr*»£. h7>A#- hy\>y r-*fcb*>L 
&C\ **UW*kD»^ y\>y YimcMMm&L'S 
t*Th5VX*-h/<*-y h*£l8U ttl73r*. Lfc 
tfoT, H&^bS9 0 9ti, |H 

*fl«IlEh5>A?K-h/^y h*ttl*r*. SI* (Arri 
val) ^'TAX-SJVy (time stamp) tmSM9:9 1 0 
l*. ^»bX'Tv ; a— 5 9 0 8fr6A2l3tl3PC RK 
h5>X#- r-y\>y hOJSlyM' HStfS 
f8fl!ltc£J*T*B5SJ*^T A T S«|f9T5. 

[0 0 9 7] *«<bA^->»i-5 9 0 8^SA73**l* 
PCRtt, MPEG27l$jn«h7>X*-hy^ 
y hoi 0/t-f hSOSfNPv®SI*WiMH5tr«>?, 
ATS©ffl«u PCR<Dtffllire-\ 0JW \*m<D/W h 
tf»*T*Wffl£fc*. 

[0 0 9 8] 7P y K (Block Seed) ^flDElK 
91111 b^SX*- r-yf^-y r-*J^b&9 0 9frS 
$itn*ri2> b^yXX- h/f$-y r-KATS^ttflPT 
5. 7Py? • K (Block seed) f^AOIslSSQ 1 1 
6di7D*n*ATS«*©h7>X?K- hy^y Hi* 
7A-^/h77 9 1 2*ii-3T\ flHtjOS^tiM 
5C\A73*tU «S?IHWr*IWM31« { *fT*tifc 

[0 0 9 9] |B«JI*2 0 0^jn5ATSfl$© 
h^VX#- hy?^y hli, RMUl^ai 5 OT'Bg* 
fb*ft*MU:BI7 (c) lE3*T«C3fcnM*IS4&fettB 
T-A7D*n. *©fts IBIMK*2 0 0l;:ttMStl3. h 
htflHH*IS»Tiai*tlTt», A 
TS«MW*E£lE«J:oT, h 5>X?K- hyx'-r 
y h©fiflMB^OA73W*J**!l«l-r*C ttf T**. 

[0 10 0] <bC5T\ ATS<D***tt3 2tfy HE 
a«oTl>«W77tt»<, 2 4b'7 h7bM3 1 bfy h 
?feNib&t\ A T S CD tfy h fttfSt^li if, ATS© 
BtS73'7>-S«-6 ,: -M|-r*^^6 i: S<%*c ffilAUfs A 
TStf 2 7MH z*|jg©y\V:HJ-7J'7>'S'-T i 255Ji 
^ 2 4-b i tg©ATSti«— *?)0.6 

y-i*T»-i-»a:***?a6*. stfss. K5>x* 

- h ^ h y -A©/ Vr y h P^fflfiv MPEG2 com^lz 

L&tfS, -f-»ft*«t*Ts ATS*24-bitti 

[0 10 1] £©J;-5Ks ATS©ti7h**«^S 
*tLfc«^, 7p^t- Si©f*Wlx-- ??$57o 
y •?->- K©«fiE<b LTt^ ofrO^Witf RTIBift*. 
?u y • KatttfftftrH 1 0 ic^-T. El 1 0 ©#<J 
Hi, ATS43 2tf7 h5M6fflr*ffl"Pa5*. El 1 0 

©flj 2 ATs«3otf7hcu p \z-wmm 
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(CCD «2t7 h4MBB?*«-W5*. =lfcf-*Jffl1f 

T1fl8T-a&y. SCMS : Serial Copy Management Sys 
tem-¥>CGMS : Copy Generation Management System^ 

Wtostifcx- * attiRft < =1 tf-tfsfprarti-zv* c 

t*iri?ll¥-7<J— (Copy Free) . WK<D3*<DZlg 
-fcffpTrSltSffca fcf— fFPj (One Generation Copy A 
Mowed) % □t-*K«»*f =ltf-«± (Copy Prohibi 
ted) 4£©flttBtfai*S. 

[0 1 0 2] 01 OiZ7nTm3lt. ATS*24tf-y h 
iU CCI«2lf7l-«fU *6tCffi©ffi?B*6tf 

2<D=\e-#mmMT?&Z*9neVa > (Macrovisio 
n) <J)*y/*V (On/Off) ikmrmifoE. tt4&flt 

«** mt % z. t ti< ww**. 

[0 10 3] [*HEflffllj8£LT©yy- (*) «ii 
lz-z>^T] 5Wc. 01 lc^LfcS«S£ilB#, t^-S 

07£3 O 01 1 £DgT!gK,T;-r:f >M'0~1 5fiHH^ 

©fB»B*«ar»*. -rsfc-601 iias*?* (>yy 

-) *3B©**:y-:7 : leafX^^-ti-^tKOiaKSSsS 
[0 10 4] &r/WX0~1 5«u g|£B$ (tbffiB») 

tittm (y-K+-) ej:tf*u-7©u-7*-*s 

#7te*rtf 0 1 1 ©gTIStC^-T K 0 0 0 0~K 1 
1 1 1tfSr/W70~1 5(c*tifti»jyaTStlfc 
y— «±fS!CDKRfrS> BTISfrS2# 
B<DS5 (/- K) lclUB**ifc*- :KR~K111? 

[o 1 o 5] 0 i i ica*r*yy-«wicj8t'»T, 
T/K7 0liiJ-7*-K0 0 0 0i:, /-K+-: K 
0 0 0. K00 s KO, KR*WWr*. ?;W75tt 
KOI OK K010, KOK KO, KRfcmfTT 
*o 15(i, K 1 1 1 1 % K 1 1 1 „ K 1 1, 

ki> KR*w?rr*o &t\ 01 1 ©yy— tctt^/t 

-f7.# 0 ~i 5 0)1 6<I©*gE«i-fU y y -J&itfc 4 
[0 1 06] 01 1ffly'J-«fifilc**tl4*IB 

asssictt, ®*t£nmt& fiuufDVD, cd> 



[0 10 7] LnSCl^Sx/K^ TZfWr— */a 
HA^TcgPSh -r&fe-Sx/WXO, 1. 2, 3£lsl— 

- * aw l ft y , 2B * t^u:* 5 s av s / u 

Xi©7 r -^3SS«*fffi:3«H(*, 01 1 ©j5«?H 
fu1£&tt* t§t?rA'f70, 1. 2, 3*1 ^fl)?" 

•So '©j;-5S'?vi/-:7«\ 01 ioy-if>u:aa# 
[0108] y-K*-, y-7+-t*. ^1 

£LTfccfcL\ CtlS©./— K*— , <J-7*-ltm?L 

So 

[0109] ceyy-MBicstvr. 01 16^60^6 

0, 1. 2, 3tty-K*-<tLTft)i<D*-K0 0 % 
KO, KR*Sft« 0 COy-K*-«*«a*3pJffl 

0, 1, 2, 3©*KH«T£;r<ttfprt&<k&3 0 ft<t 

Xi£. &miz&*STZS- K+~ K 0 0 

<r/WX0, 1,2, 3<WMj96i<©7X*-*-© 
KStfRTIBT?**. »Tft%V^^-*-K master 

*y-K*-KOOTB»fkLfcfi|Enc (K0 0, K 
master) * % h7-^*^LT««t^ttGflWWlC 
««LlfMV7 0, 1, 2, 3tEft-rntf, 
XO, 1, 2, 3(Dfrt\ stftttOT/WZlCtS^T 
K+-K 0 0*I^T«f E n c (K 
0 0, Kmaster) : Kmaster^f 

ZZ-tftpimttz^ His, Enc (Ka, Kb) ttK 

[0 110] ftSKAtiC^T. 
Pfi%tZ>m : K001 1 . K 0 0 1 , K 0 0, K 0. K Rtf 
(/\-y*-) ^ J; y »«f ?nTSM Lfc C i: 6^ 
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5?Lfci«£\ 3:ftJ!i(», v'T.t 1 /* 1. 
2, 3©^;U-y) T&gfg^ft^-^^fctt 

©fcA6l;H4, /-K*- : K001,K00,K0,KR 
tttlftlffcfttK (t) 00 1, K (t) 0 0,K 

(t) 0.K (t) RfcBRU 1, 2(C 

^©MKr^-^e^Si^gft^^o 'IT\ K (t) a 
a alt, SKa aatf)1£{t (Generation) : t ODMfr* 

[0 1 1 1] K*f*-<DE*»Sfcoi/»TlfKllT*. * 
-©ISrlt 0]tU4, 012 (A) KSf*JMb*-^ 
Pv? (EKB : Enabling Key Block) tmXtlZfn 

[o i i 2] El 1 2 (A) teavr#»fl:*-7nv* 
(EKB) ICW, y-K*-©M*r©£9Rl:7W*fl!> 

®?'WX0, 1. 2ic&ivr* m«t<DJE»ry-K* 
-*^T*E£*gtt£LTfl88*ftfc7Pv*y- 
*T'S5. 01 1 frSB£Sfr&J:5U:, ^UXO, x 
M-rxm, B«fy-K*-tLTK (t) 0 0, K 

(t) 0. K (t) Rtfj&STfcy, 7 r /^X2f4, H 
SFr/-K*-<bLTK (t) 001. K (t) 00, K 

(t) 0, K (t) 

[0113)012 (A) ©E K Blc5**ft*«fc-5U:E 
KBfctt«»©W^b*-tf**ft.5. «T«©«*fb 
+-(4. Erie (K0010. K (t) 001) 725 
*. Cfttt7 r 7M'Z20#oy-:7*-KOO 1 oicfc 
■3TW»fb* tlfcKWy- K*- K ( t ) 0 0 1 T35 

BS*fb*-*tt«f U K (t) 0 0 1 ZmZZttfT^ 
£fc, 9»£«fcy«fcK (t) 00 1«fflUT, 0 
12 (A) ©TfrS2«a©«»fb*-En c (K 

(t) ooi, k (t) oo) *wfimttit»* mm 
/-k*-k (t) oo*»*c mTm 

01 2 (A) (D±fr£>2mg<D9Bmt*-E n c 
(K (t) 0 0, K (t) 0) *«#U JEtf^-h** 
-K (t) 0, 012 (A) ©±frS 1SB ©Bg^<b* 
-Enc (K (t) 0, K (t) R) £«^LK (t) 
R*f#*„ — f5. 7AVX0, Hi, /-K+-KO0 

ottjBKTfcfcfSHc^sftTassr* »k/-k*-£ 

LT#£fc©t4, K (t) 0 0, K (t) 0. K (t) 
xA-fXO, 1(4, 01 2 (A) ©±fr5 3 
lftS©Bfi^fb+— E n c (K000, K (t) 00) £ 
tt^LK (t) 0 0, tmu «T, 012 (A) <0 
±frS2«S©B»fb*-E n c (K (t) 0 0, K 
(t) 0) £«-^L, H«fy-K*-K (t) 0, 01 
2 (A) ©±jbVi1«aCDPg^fb*-En c (K (t) 



0, K (t) R) (t) R^f« 0 £©J:-5 

KLT, -FA-CXO. 1, 2W:M8tL/c&K (t) R* 
»*E fcfc, 012 (A) ©Ox-y^X 

t4, gm*-t LTmmrzs- k*-, u-?*-© 
[01 14] 01 1 ic^-ryu-«jfi©±ffis©y- k 

K (t) 0,K (t) R©M«rfi«T»T-«y, 7 

012 (B) ©*«Mb*-^Py^ (EKB : Enabling 
Key Block) SSl^Zi?. B»fy-K*-K (t) 

0 0?f/W70, 1, 2 lrBB*Err*;r 
[0 1 1 5] 01 2 (B) fc;5Vf EKBti, «jlfcmj£ 

^RltgT'S^c m#ffl£LT. 01 1 fcjSfcT^T^U 
-7(*3CfyWX0, 1, 2, 3tf««|BIHift«ffi^ 
TfcU, $T/c&*ii©VX$-*-K (t) master*^ 
mT'&ZtTZo £©<h*, 1, 2, 3© 

«ii<D/-K*-KOO*MllTLfcK (t) OOZm^ 
T*ffc*fca©jUfr7X*-*- : K (t) master£B§ 
^••fbLfcx— 5? E n c (K (t) , K (t) master) * 
012 (B) IC^fE KBiittCiH^-T^o £©13*5 

(CfcU, 7/WX4r^, *©fte©^U-7©8l&(;:33 

[0 116] t4fc^ x/WXO, 1, 2 (4 E K B ^ 
«iaLT?#/j:K (t) 0 0£ffl^T±iBBi^3fr£«#T 
tUi, tB&£-c*©^x$-*-:K (t) master-^x 
<(7*—:K (t) medians* Z.htfrJrtgK&a,, 

[0 1 17] [EKBfcteELfc^-fT'*-©!^] 
01 3K, *mBSA©Jt<JD#fF{liJRT*aB«1t«¥2 0 0 
0-1 05 3 28 Z*mm Ltc t B3jS?©* 7*- K 

(t) media^ff^aaSflJiLT, K (t) 0 0^ 
TWcfcKil©* x-f 7 7 +- K (t) media^Bf^bL 
fcx— ?Enc (K (t) 0 0, K (t) media) <b0 
12 (B) fc5*TEKBi*IEIWK**rtLTB*Ufc 

[0 1 1 8] 01 1 (C^-r<fcdtt, S^IB^S^Xt 1 
AK14, jSflTBSftfc, ?/W^0, 1, 2, 3©4 
■0(7)gS6^^tl-S<br5c 01 314, =rlUX*ft*) 

*- ? i tin t * ic iBSSft c <t k*j y m t s ft* y 

2) A ,; IB@«<t±0=l>5 1 >^^Bg^ktL<t4«-^-r 
afc^U^gS^T^y 7 *-*, Efi«#fC|»W*ftT 
^•SEKB (EnablingKey Block) <bSB»SSSa^fB 

[0119] x/wx2©^ : Eytctt, a»tc©3wwy 

aTe.ft^U-7*-K_0 0 1 0<b, *fttl»6*flD;U 
- r-£?'£D&/- K0 0 1.0 0, 0, ROD/- F*— 
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C-tftftU K.001,KJ0,K.0,K_R) 

♦MftStlTt^EKBOa-S. <>77^ (index) 
^0 0 1 0(DBg^3t^e»<DJtO'J-37+-K_0 0 1 
OTH^LTV-KOO 1<Z>y-K=tr-K (t) JO 
1*tt»U &fc*rL*m^T<<>TV<7X (index) 
#001 (0fl»:**a«LT</- K0 0^)/~ 

(t) JO^SU »«K*ft*ffl^TBi-*X*ll 
^LT^x-fT^-K (t) _media*fflfr^e&S3^« 

m] mi 4©«3i7p^^HtefieoT^ wmbs^si 
r*ia»«wia)-«n«:o^TKBir«o 

[0 1 2 1 ] El 1 4Rj5*rEflHf£ltBl OOiiSt^ 
±J6 Lfe E K B lc*-3< Htb«H(c J: o 5V T 7 *- 

[0 12 2] &iz % tmn^SiW i o ottftiatfWx-r 
Z*?*SIEIMI*2 0 OtcWgiJflMtLTflDSr-f 

I D (Disc ID) <?BEKIS«*nT^*3b^3^*«a 
t^o IBSS-tlT^tltfs tV X* I D (Disc ID) «■ 

nuu iB»*nT^&^titf, Bt^«is#isi 5 ok 

«Mif0^i?f<X^ | D (Disc ID) 

U x-f X^tClBif-r^o x-fX^ I D (Disc ID) fcfc 

[0 12 3] BIMSI1 0 0(4, *[:y^7*-i 
I D*^^T. fVX^iW*- (Disc Uniqu 
e Key) *£fiET*o x^rX^HW*- (Disc Unique K 
ey) ©*ffttfc£rt**fcLTtt* 01 suiavrj;-? 
fc % ?P BTOHHM^fc/ \ y 5/ a Htt(c * xV T 7 
*-£t*X* I D (Disc ID) *A*LT»6ftfcfS 
**JBl/>*0!l1 0>*Sfr¥> % FIPS 180-1 TS»S*lTV* 
/Vr>2»SHA-1K, ^7>7+-^tVX^ I 

d (Disc id) totry hawcj:y^sti*x-* 

©**x-fX^BJ**— (Disc Unique Key) £ 

[0 12 4] fcfc* laiCiflDfflWiT?***^ 
- (Title Key) tWNDIHtl 5 0 (H 1 #RH) fc 



[0 12 5] *tCx*X*H**- (Disc Unique Ke 
y) <t£-<HI/*- (Title Key) <Z>fi£i±frS, h 
JUBS*- (Title Unique Key) *£.&lTZ> 0 

[0 12 6] h/UBS*— (Title Unique Ke 

y) £tt4)J|{tntt££M:« 01 6 KatfJ: 5 ?p 

hil/*-*«HWkLT»S*lfclSJIl*«^*«1 (0*26 
FIPS 180-1T*a»6nTt>*y\y5/aHMSHA- 
1 U\ ^7-f7+-<tr^X^ | D (Disc ID) tflSfcT 

fcf-J/ hOUJ^l^SiEaiax— $r5(D***-r HUBS* 
- (Title Unique Key) £ LTflWr*«2«fir»#31 

[0 12 7] ±G«>|MH a pu % ^7>f7+-i:7 
-<J*^ | D (Disc ID) ^ST-fX^if^- (Disc Un 
ique Key) «£jftU cn£*-f Ml/*— (Title Ke 
y) HUE**- (Title Unique Key) &*tl 

^natj^-r^cfc-p^LTt^A^ t^x^is*- (di 

sc Unique Key) ttWt LT*x-f 7+-i7>r X<7 
I D (Disc ID) <k$r-f HU*- (Title Key) 
2-THUBW*- (Title Unique Key) &£.8ZLT%>£ 
<. Sftx £-<HU*- (Title Key) £JH^"TtC. p< 
xVT 7 *- (Master Key) i7^7^ I D (Disc ID) 
fr6£-T HUB**- (Title Unique Key) *BMa<D8£ 

[0128] ?etr s 01 4&m^T, *<o'4kv>ym& 

P*^>-K (Block Seed) i x 5£te£tf Lfc$r-f HU 
El**— (Title Unique Key) £;b N S, WP'^O 
T-$*B§^t?Z>m-?&Z>7nv? • *- (BlockKe 
y) tfffl«ffft*o 
[0 12 9] -yuvl - *- (Block Key) <D£j&75i;£ 

<2#j£0i 7tc^-ro 01 ima 2 kfy h 

ffl^Py^-S/— K (Block Seed) £u 6 4fcryhG>£ 
•< hiHf *- (Title Unique Key) <hfr5, 6 4t7 
KO^Py^*- (Block Key) 2o3* 

[0 13 0] ±JBcS*Tfll 1 M6 4tTy Atti 
*tf*n^tl6 4fcfy h^BB*H»*flMLT^ao * 
-f HUB**- (Title Unique Key) 
iiU ^Dy^^-K (Block Seed) t3 2eyh0 
S» (=l>X^>h) *illSLfcfil*A*LTHHMbL 
rcttJR*3/ny^*— (Block Key) t LTl^ a 

[0 13 1] ffl2lt. FIPS 180-1<JD/\v->aH»SHA-1 
*fflL^fc«IT**o *>rh;l/H**- (Title Unique K 
ey) t^Py^>-K (Block Seed) Zm&LtzmZS 
HA-1fcA*U *<D1 6 0bfy fciit 
HrFffl6 4lfyh«)*flWr*a:^ 6 4tfyHc||tt 
LfctO*^Py^*- (Block Key) iLTWc 
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[0 13 2] fc:J>\ ±SBTH*7V;**H*:*~ (Disc U 
nique key) . h/UHW*- (Title Unique Ke 
y) , 7P»**- (Block Key) ts-nwi^jSTSfly 
fcKELfctf, TztTilt. x-f (Disc Uni 

que Key) M/H**— (Title Unique Key) <D 

tf-fX^ I D (Disc ID) ,t*-f Ml/*- (Title Ke 
y) <t7'P'y^:>-K (Block Seed) SlL^T^n*^ 
*- (Block Key) «£flBLT«&«fcl\, 

[0 13 3] 7ay?*-&^mztizt. tkmztirc 

ynv?*- (Block Key) ti^T^P?^?-** 
BB^k-r*o El 4©Tlglc^rJ:-5tCx ^n-v^v- 
K (Block Seed) **fc?n v*x-*©jfcH©Hl~ 
m/W h (fc«t:?LHrm=8/W h) t4#S8 (HrU?*1 
6 0 8) StlTH^fcfcfftt-er* 

•n^-^STSflw^kr*. fcfo\ Bf-§-<k?n^^m 

W%V>7'UvV7—5Ut. Bi-^5fl.S#S1 5 0lC?46ig 
!£3-nfcB&EMk7';l/rJyXix{cS£^TBi*fk**i*. Pg 
^kv^HJUXA^LTtt, /i: i: *.14F I PS 46-2?«Jg 
7*-*l3DES (Data Encryption Standard) StEI^SC 

[0 13 4] «±flMQSfcJ:y* PV^vytt^ny* 

*<snr\ isttHastife^TVT 7 *-* 

[0135] at, laSLfcBWfbav^vyT-^ic 
4KOIMBH (»&£/«» fcJBl^Txv^l/SS^if 

tLTit. tctx.lt. IEEE P1363 T*Jtt*JJ£f<D E C 
— D S A (El I iptic Curve Digital Signature Algorith 
m) *m^ZZtftT°Z%o HI SKPVxVyCfBS 

[0 13 6] ST. EHSSHHttyiyy 101t 

>^>yBg*fbl4, Bl4*ffll>TKWLfei3l!:, 7" 

[0 13 7] ^77 75 1 0 2Kfcl/>T\ IBS 

it. tctXtS. IEEE P1363 T'mft®imrp(D E C - D S 
A (El I iptic Curve Digital Signature Algorithm)*'® 

[0 13 8] mz. Xtv7S 1 0 3lcfc^T. IBSS 
S&Htt^U^T^Jl/H^iMnHlEHttfclBH:] 



> ^ > fcfcttStttt TlE18«{*lcSB« L, ^7^7S 1 
(S 1 0 2) *J6ff-j"«. 

[0 13 9] ?6(Cs 121 1 9 izmmtziy^yyiz^'J 

L?ias««trr ««$omBtt37 p 

— ^^"To 

[0140] xfy7s2oi Kfc^T, ibhwshh 

tiBu5E©E KBffiS (HI 3#H) K £oT* tV 

[0141] s 2 o 2 tcjj^T. fsmmtozmimnt 

LT©tV*.^ I D (Disc ID) tfgEKiS^ftTO^ 
EH**l7V*itf s 2 0 3T£© 
tV*? I DfcHUiU KH^Tl^4tt:h.«S2 04 

I DS-feSU x-fX^lcfB^f *o ^fcU S 

205m ^f-rFt-if^^^iDm^ x 

-fX^fflft-tStfr*. 5VX*H**-(4fcfcK 
B^L/=J;5tC. #J*.14\ FIPS 180-1T^466nT^^/\ 

y->aH»s h a - i *m^*tt i t>7uv?Bgmzm 

:5</\y5>aH»*ffiJlT*£S6 (Ell 5#sa) 

[0 1 4 2] mzs 2 0 6lcji^ ScDiBiSCi: 
CDWttSOMLLTCD'Sif bil>*- (Title Key) 
U ^EELfe-SH- h;!/*-*^** (IBHtttt) lc|B 

-f HWr-tirS, *f Hl/H**-*£« (Hi 6# 

SB) r*, 

[0 14 3] S 2 0 8?tt, IBHjf^HHttlBHr^ 
PVxV-yx— SrCHPWfkT*— ?*TS/\>7 h^ffj 
?9flT«. S209T% TSjJlI?S3 0 0(t £T 
S / Vr y r- £gf§ L fclSSIIlBHTS 5ATS *{tflDT 

5o **^tt3t:-w»iiH8cc i <t a t s n seicffe 
cDflWB*H**t>-sfe«*i!niar*. 3«c, s 2 1 0 

7\ A T S^rftfiD LfcT S/ \> y h *JH5*Sffi U 17 
Py^*JBflj-r*«AtfX = 3 2£HLfcA\ 365^*4 

1 ICJi*. Xffl, »5^tt/(tv h^7fT*fl)A>7 h 

[0 14 4] ;*U:, Bg^5QS#Kl 5 Oli, S 2 1 2 
T\ 7P777- SJ<D5feBI©3 2k"7 r- (ATS=£$t> 
7P y ^ • K) iS207 T^fiKLfc^-J' hJl/H* 
*-<hA^6, ^-<3D7*Py^d!)x— 5»*Bg*fk-r*HT'* 
47"a-^*-t4l« (HI 7 #88] r*. 

[0 14 5] S2 137'tt> 7P77+-?ffl^TS2 

lzi>ffl.WLTc£olz, VgmtGm&tKZMt. Jav 
<7?-*0)m+ 1 /Khli^«^7-^fm4„ 

5DES (Data Encryption Standard) tfMm'ZtlZc 
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[0 14 6] S 2 1 4T\ fE»-7n y?&m-\Jn yir 

tf'lEEE P1363T^«*JS4"<DEC-DS A (Elliptic Cu 
rve Digital S gnature Algorithm)?&)lfflf £<, 
[0 14 7] S 2 1 6T\ Bi^-fkLft^Py^x-S* 
IEii&«;:|B8!T£o S 2 1 7T\ 5f*IBSLfc 

^7U £x-$*ISIiL.T^&l7:rUi'S 2 0 8lcMo 

[oi4 8] J->,±©5astcj;y, p^xv^w^tj 
[0149] ftfc, 

a v 7 1 > y nag =f— ? tt S-ti^tiotf* ffitfttSJfftlBafli 
J**t,-3TlBB**l*. ffijjltfWlT-^t^-^Ui 
LTIBISaEttlciaST* £ £: K «fe oTWfcfWffpJtgT 
25-5„ El 2 OtClBiiPV^V'yicM-r*^^— SkDT 7 
KbX^-^*^-^Jb<h LTfBaS-r^^ODT 1 -^^ 

[0 15 0] 112 oic^-r.t-5^, Sn^vyttziv 

[0 15 1] *ic IB«IWWcfl»fk3>r>y*EII 
TZmz. Bf^fkPVT^U/lc^^UffT^ODTIiJS: 

•O^T, 1212 1 ©7n-*JSl^TBMST*. 

[0 152]^f77"S30 1 Kfcl^T, IBtSSS^S 
t±l32©EKBSaS (01 3#re) K.fcoT^-rT'* 

[0 15 3] S 3 0 2K£(,v?. IBttSKf^lcMUBUIIHB i 
LT©f-fX^ I D (Disc ID) tfRUcG*&flTl-t« 

t^x? 1 D&mm u Efi^tiTu&whafs 304 

x I D*<£j«U TfXOlZsdMTZ* ZZl^ S 
3 0 ^f-r7*-if-f7^ I D*Jll/»T, x 

-fX^H*+-*Sfe*r*. 5VX*H**-(«fcl;:lH 
B^L/cJ;^^ ffjTltf, FIPS 180-1 T-S4&6+lTl">*/\ 

y->i«*sH a - 1 *m\.*ztt&-7aywtmcm 

•i</\y>aH««Effit«SS (E11 5#BS) fci:* 



[0 15 4] JfcfcS 3 0 6 Kit** BODlB^Cc: 
©H^©ai:LT©^-< (Title Key) *^fiE 

TSo T^JUaSOSfiESQWiflSiltflEEE P1363?* 
*S*J^ c t J ©EC-DSA(Elliptic Curve Digital Sign 
ature Algorithm)«-3iffi-r^o *6lc, &£Uc£<f h 
/I/*-, t^-S^USS, *J«tc/4iBB«fiEW»*iB«Ji«: 

[0 15 5] 3«CS 3 0 7?, ±fB©7 r -rX?ISW*- 
i*-f h;U*-i:A s 6. *-r Hl/ffl**-*£j* (Bi 
6#jsd r*., 

[0 15 6] S3 0 8 fBiiS£SSliIBIif^* 
3>7>yf- S'<D«BB^-fk7 ? — >*TS/\>y r-©fg 

tsmw*. S309T, Tssaa?ia3 ooti, st 

S /«r » h «S4I LfcB3*jflm?S« ATS £ttffl]-r 
*o S*W*P£-»J»1I«CC I <t A T Sx SSfcflS 

©iWB*«**fe#fdi*tti>DT*. *c=^ s 3 1 0 

T\ ATS *fif UP LtcT S/tfry h *M%gfl| U 17 

y \> * h ©*7*s-r«B'j x-* *»■ Lfc^*w*r 

*. ^r*lfr©^#*ESftfci§^tt*?v:7S 3 1 
[0 15 7] BgWI^Jgl 5 0(*» S 3 1 2 

*-<k#e> W^ay^ef-! 5»*Bt#fb"r*«?» 

[0 15 8] S3 13TU 7n-^*-*ll^S3 

tCtlMB^LfccfcetC. B»<b©*Hlt3S:*©W:, 
^7-?©m+ 1 /^hgfr5*»T-*S7TJ5*. 
*9fls7 v iUdT>;XAtt, tetZt£f\PS 46-2T'SS^?tl 
5DES (Data Encryption Standard) A^ilffiS-n^c 
[0 15 9] S 3 1 4T\ HtmtLttfnyfT 1 -**: 

ft.mmmzBZ&?Zo s3ist, ^-^^esLfc 

[0 16 0] JjLt<D«raic«fcy» av^V^BB^fk* 

rjaniB^sA^fB^flcicfB^trn* c <t kjs:*. 

[0161] ±EflDffll?tt*-f HU^-Kt^*;!/** 
^©x— 7.^tn|BS?nfc<kL^ C <k^^ 
[0 16 2] [*7 ? -<7'*-£/l^fc=l>5 1 > , yiS3E«! 
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[oi6 3] Pi^asicfc^TJi. «s««(4*r» n 

[0 16 4] rato-6» ItgiMiLT^S, «M 

tt^SntL^, Bffi&IRD&im (*«ttEEft) * 
m I s T IBMSIt L TE» L fc 5 s *J * 7 U*« * &3 
f^o ^v>*;l/*&©&2:£;£<!: LTlt Su 
JEOEC-DSA««l^Ct#7*5. 

[0 16 5] S^aitt, §EK**lTl^*iiBfl8l 

EH«fr£tB£^©tt8!]11HR (ID) *WthU Chi 

>j a vit«#SE©KiWMtf->xxAfr s y 

[0 1 66] [V*4—5/a>V7>b*aWJ#—9 
&2) >a>1f«tLTtt, fcijttfH2 3U: 

5,"T U 3 > 'J 7. h E iffT'SS. 'J # 

>3>«J7.h«H^rj:5lcU<K— ? (mm ? 
£88S© I D^-flflHLfcx— S»t. 'JX h<DA-5?a > 

CO'J#^a>'J7m, TztXliS. 1) « 

2) :>tV7t- y K9— ! >^ 
IB«l»*^L.TaBi*-&*. fXfi* 
W*8IBia-tt*CiteJ:y» B£4031l«liH£Sil#cl: 
U «f 'J S> a vflHHS1f6ti« «fc r> \Z LTfc 

<o 

[0167] gfc, y*5r-->aVyXh*flyST*HS 

[0 16 8] (E K BfcflJJSLfcy 
U <Jt>— > a VffifB^El 2 3 ic^f J: LT 

««BKE*r*««*t6r. y*--**ti7v*# 

xAmfcl^T, B1 2© (A) flyilESTE KBtfEM 

ft* / - K*-*«> 'J -ttl=« Lfcfc©# H 2 4 ©±*g 
[0 16 9] -£LT, Wff*tlfcy-K*-*»6*l* 

©«, *»T^Lfcyy-©y-7 (X) ©TtcfaMr 



su#— ^*tiT^*iw»r*ci#T*. Efts© 
i Dz&ircm&mmLtcziyTyvT— ze>n±z 

y y tf-^asic J:seai3 >TW(W!W6«#±r 

^CttfeJtfcifc*,, *4S» C©0S?tt» B1 IKfctt 
«y-7©ffiSi:, =fJU7,0 \ DtfttJELTt^Ci: 
tUitLTl^. T&fctS, #SWfc*-7n>:/* (E 
KB) ©-O^y^X© h b-X*S^83SH I D(c»-3 

[0170] hb-T.iasic.t^y^-^siffico^T 

(EKB) ©7*-7yHI«Sir. /<-5>a>1 0 0 
His mtoi\&—-7UvV (EKB) ©/\"-5>3>^,tt 

Oo x7X1 002W;, rnmcA—fUvt (EKB) 
5 s — *#-f>* 1 0 0 3ti, m$Mt*-7n'y{7 

(ekb) *£D7 r -^a?©ffis : &^-r<K-r>-s»T-$y, 
Zftf'O* i o o 4tt*?'gB©fiis, 1 
o o 5 i±«*©(OT*a*-r#-r 

[0171] x-^ffll 0 0 6tt. m5UXJBMT*S- 

[0 17 2] ^r^1 0 0 7tt, x-^SPlC^iWJnri: 

^^"v?»*o C©^^©(5f#;U-;U*H2 6*ffi^TK 
B^f^o B2 67U, x-^tLT^tCHI 2 (A) T 

iKKLfc*sji<k*-^p<y^ (ekb) *aif»r-r*«y* 

SLT^io CCDB^ro^-^li, EI2 60S (b) (c^ 

J— FOT KUX^ h7 7"/- FT 7 FlsXtTZ* Z\<D 
m-Slt. ;U-K*-©MSr*-K (t) Rtf«hT^ 
^.©T', hv^y- KT'KUXtt KRtft*. SKDi 
mZti&t&LtoT-* E n c (K (t) 0, K 

(t) r) ti, 02 6 cd (a) fcstrrewu/y-icavr 

ffiStcS^o CCT\ ^©x-^ti, Enc (K (t) 
0 0, K (t) 0) TS'J, , >y-±T 5 «HU©x— Jt© 
£T©{fiStcS^o ^-^tfJBSW&tt, ^^o, a 
1 tfW£**i*. •S'^i {£ (L) ^-57', £ 
(R) iLTlS^^n^o Sli®f-^Enc 

(K (t) 0, K (t) R) ©SKtex— £#255© 
T\ L^^=0, &lCltT-Z&%;^COT\ R^y=1 
<bS5c J^T, T^T©x-^m^-?'tft6Sl*-n, 02 
6 (c) iC^f x-^9J, fc^lf^^JtfltrtSft*. 
[0 17 3] ^•J'li, c (K x x x. K y y 
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ZtlZ)*— x— £ E n c (Kxxx, Kyyy) . . . 

0:Enc (K (t) 0, K (t) root) 
00 : Enc (K (t) 00, K (t) 0) 
000: Enc (K ( (t) 000. K (T) 00) 
. . . <n£5%7-$Mf£t?ZZLt&pjmT-&Zt\ 

«ff(Cj»l/>T«#3: L<fcl\ CtUCfcfU ±5ELf=^ 
<fZ*~iiLW%™?mi\9-$ t LTffl^* c <h lc «fe 

[0 1 7 4] E2 SKMoT. E K B7*-77 h lZ~D 
^TarSfcBfflr*. S3 (Signature) « % WSMb*- 
-7P-y7 (EKB) *«H7LfcEKB«f5JB» 0>Jx«' 
1811)1* SWS-l2>^. 3>^>»>P/^^ ^fllSI 
90JfcfTr«*?*&?*«. E KBtMLftT/W 
Xti«**Efc*oTIESJMraMb*-7ny* (E K 
B) «*?#tff5lTLfc*«Mb*-7nv* (EKB) T 

[0 17 5] H2 6KMr*KW* v Sa»a-ft*«fe'3l!: 
e k Bi*nctt*rt*tifc^^±sy- KCOfifttffi©y- 
KOa^-^OfiJSteO. ITasLTV*. t6t>S? 

'J -7 I D(C*3< E K BtOiBttUS. ffc*) 

[0 17 6] U-7 I DlC*-3< EKB<D&» GdlU 
ICOt^T, ■ 2 7*JB<^TWflir«. El 2 7 (a) 

*-*f/W7 [10 0 1] .fr^o EKB 

», H2 7 (b) ©«fc3ftflHMb*-t*y©«ja*j# 

0 0 EI2 7 (bj ©EKBli, EJ2 7 (a) ©10Cf 

/Wx [1001] -rsfca&uu KR, K 

1, K10, KIOOSIIiLftEKB,!:^ 
[0177] C(OEKB*j0af*C<bfCj:y, U#- 
<?=rM7* [1 00 1] JM^OU-^ttr^THfrSti 

fc;u-h+-K (t) r*k»t**. rat>«, y- 

IV- K+-K OtrA-f XrtlCfiatLTl''*©^ E 
nc (KO, K (t) R) £K OK^oT^T^di: 
?JE«r;U-h*-K (t) RSIMiRriEtft*. 
K 1 1 WTCU-^ttKKStiTVfcl^K 1 1 *Jft^ 
Ts Enc (K 1 1 , K (t) 1 ) *K 1 1 KJ:oT* 
*r*Ct?H«fy-K*-K (t) 1«R»LT» * 



SIC. Enc (K (t) 1, K (t) R) £ K (t) 1 
K 1 0 1 OTtt 1 ;-?^^** XT-yW 1 of 

torso*?, m«teK»fji/-h*-*Bi»?**. 

[0 17 8] £fc* < ?*tlT^35:LMJ-7*-K 
1 [1 0 0 0] «u IBC'J-7 

Enc (K 1 0 0 0. K (t) 100) 
LT, K (t) 10 0«m«|, ±ffi<7V- K*-£IH 

[0 17 9] iJ#-7jn?hT/W7 [10 0 1] ©* 

ft, aaou-^o— «±©E«fy-K*-K (t) i 
oo*EKB«at=j:ya»T*ft^©? % tun* kk 
;U-h*-K (t) R*Bfl»r*Ei:tf?*fci,\ 
[0180] y#-**;hTi*&WEMi&y\K'f'x(«: 
(i» El 2 7 (b) KaVr^-^SBi, £?*wr*EK 

[0 18 1] 'J#-**|I*ffJM33£T*7 s /t-<'* 
tt, EI2 7 (a) ©'J<K— - [ID=100 

1 ] ©*JI8«EEI!I3»©«SE©«, 'AMmtiEWWfrZ I D 
SflXWTSc CCD I Dtt [1 00 1] T?£l>s EKBiH 
«y 'J -«J$© U LTt^c 

[0182] id [1 oo i] ntnvmLitf/WT. 
it, I d = 1 o o 1 O'J-yiztus.r^/Uxft. e 

K B ICjS^TWabfc 'J-7t/W74 LTBCdrtlTl^ 
*fr*WEr*. C©«Htt» r=B:to-5s 'J -7 [10 
0 1] tf3E«f*tifc;U-h*-K (t) R*«fii?S* 

[0 18 3] #H«f/- K*- (ex. H2 7 

(a) ©KO, K1 1fc£) (DTtiUzmT2> , J-7T& 
tilt, V ? ? ttTl^fcl/' £ <t tfE 6 h s T$> 'J , IES 

ttK«r*U-7T»*«*(4» *©kirv- k*-* 

[0 18 4] Wf£9m<D-mt LT% E K Bte«MS*tl 
fe*^fc»r3tNTE K Bjfi8«QS*ff3B:-5fiiJ*it^-r 
*c E K Bi&8J5flS(±, ±ffi©;U-r-*-6^6*-EfS 

y u-*ttA«»5ti«ncr«ira7»«. #j*.« - ei 

2 7(D*J-7 [10 0 1] ©I [10 0 1] * 
[1] s [0], [OK [1] «S4^hiLT, 1 

[0 185] EI27 (a) hfr8, ID [100 

1] ©S±ffit*yR±1?$ , J> « A (citC EKBft 

nmaofvii. o : {o, 0} ?asy, PStttcx-^ 

So :^tc K 1 <7)Tfit©y- Klcitfeo ID [10 0 1] 
©2#a©tTy KttO?ftU. SfflOlcJtfco K 1 ©Tffi 
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<D9- 9mm^T'$i<fli, EI2 7 (a) . (b) CO 

2 {o. o} ?ibv s msic?*— «**r«&wxs 
n> ^fflijicii^Ki oici'jfits. i d [1 

00 1] ©3#@©tfy HiOTSU, £«Cjtt>o K 

1 0©Tffi©x-^W^*^-r^^±, H2 7 (a) , 

(b) <753 : [o, o} T-a&y, mmzT-ftttz 
tWttti. £Mizm&-K i o otcikystt^o 

tCs ID [10 0 1] 6DSTfut*-> Mi 1 611 

tcjtt% k i o ootgiot— zmm&ok?*?^ m 

2 7 (a) . ib) COS : {0. 1} T°&V. mUzlt 
T— $*&tct&\,\ ft^xS-F [10 0 1] \,z[tW) 

^tr^ztmimzti. id [1001] cotjUx 
It E K B IZ J; * h»t;u- k * -fcswST 5 * S l/> x/ f -T 

[0 18 6] mZim2 7 (a) ©U-7+-K 1 0 0 
OStnr/UX I Dti [1 0 0 0] TSBUs ±£Ei: 
[UttlOE K BF<g<7>77te*-3< E K B&Mimm. T1Zt> 

■zvj-zmzmmzmfirzt. s- k [1 ooo] 

tcilk U "3 < C «h £©T\ E K B IZ «fc 3M$r>U- h 

[0 18 7] $/c, K* 
-x •Wl^.tiKO, K 1 1 fe^TluODU-^tCt, 'J- 

tlTt^l^y- K©Ttfe©y-7M:* MSfr^ttT^JS:^ 
y_ K*-*ffl^TE K B©«WitfWr*y» SESriU 

* ftTVfclV - K+-?***»5frW:» KK 

»J6r**^c*y!pj*r*ctfl«Rni6t4*. mst* 

*lTl/*&t>7— K*— K 0, K11, K 1 0 UdtfJS*- 
**7~tt1 : {1, 1} , 4 : {1, 1} % 6 {1, 

i} <t&y. dtisii? s^Tffiy- F$/ct±y-7*' i 
<h *s l t as y . c tL 6 a) Tts© y — 7©7/ t-r x« y 

[0 1 8 8] 0 2 7K5Vr#Ui. 1 OCx/WXttO^ 

Toaw&u*— El 2 8tc^-r«fe-5leS 
£/- KOTtaB^r^Ttoy-^y/tl-fX*— J8LT 

y ^r*c .ttRrti?**. ekbot 

—9 (B»fb*-) , >y«H2 8 (b) ©J: 5 {eft 
[0 18 9] x/W7#y#-7;!r*lfcK 1 0 

o oiztt^t^^-y^iuxco'jiMtmmmt^ \ d 

[1 0 0 0] «M§Lfc£T*£» 21© I D [10 0 
0] lC*-3f»TE K BO^^»^Tyy-*ilk*ftl 

[0 19 0] 132 8 (a) <D/l/~ KfrS. ID [10 0 
o] ©I±ttt7htti7«y, fcflBteBtr. EKBpg 



©S#J©770 : {0, 0} T»*J, 

ICK 1 ©Tffi©/- KtCJifeo ID [1 000] 0D2S 

a ©try n4o?*y, £«c:it>-= k 1 ©Tffi©f- 

ZmmzmTZCnt, mi 3 (a) , (b) ©2 : 
{1, 0} T&V. £flJ(CU:5 !f -**J#fcJ&:C\ > ftoT 

y-K [1 000] (CttittU'Sttftl.S £©<h*©*4&i 

y-KK1|;mn^^ {1, 0} T£y> "Rfc© 

7 s — **8fc&l/> {1, 1} T1i&t\ 
[0 1 9 1] {1 . 0} It. K 1 ©fcfflijODTte©/ 

-K*fctiy-7(Cfit'»T©3!rfHSqH64E«f*hfcK 

1 (t) swirsrcttoBWfui^-^^EKBictt 

[0 19 2] ClCDJ:5tCs y-7 I DlcS^Tiiky* 

< y - kt»* y , - k©j* jet- <f 

AMI, 1} JfitttOfiMHtoTl^ii^U:* SSlcTte 

(ommmr-zzE KBrtic«-r*ci*^LTt-> 

*o 21©Jf^t±x I D^oy-^x/^XtiE K 
[0 19 3] cl©J:atcLTx BSEj63HcjSt"Taflfffi 

^s««§Lfcaiii«iEW»(cttift*tifcy-7 i diz 

*21<i:6^pltl«5:&^ 0 
[0 19 4] H2 9(CEKB^W^L/j:y<Jt-^7 r /U 

777"k:o^Tgfflf4 0 7777S3S1 Kfcl^T, 
«3»a«©^MaSEW»^6 I D*ffl»T*. 777 7 

i^i, i Dco^t'j-ymtcitu- K*s«<fr* 

[0 19 5] ilSfjiaati, Bua?©El2 7.E12 8*851^ 

ry-7£fd*/- Rcjyiy»<ciij«T*fc<)\ aibu 

•3WSUMi^T£oTt» I DCOWifJ-y^Tzlty-F 
IZ&^T E K BSflStf RTI6?**fr5aN -r*fc-6M«T 
yU-h^-OBOitfRriB^S^WS-r* (S3 5 

3) . 

[0 19 6] E K B^S6^PrtE7-£5fitBlC*^ I DT 
S^tfJ^i-ntl^ 7xv7 , S3 5 4lCjt*, I Die 
S^J^t" * W 71* 'J 7 *tlTf»3S:f>iEa S 

— E K Bjom&^PlffliiiLW 

iz&z 1 DTa5*tw**tintf» X777S 3 5 
ii^, 1 Dtcm-r57 :r /\"'r7iiy/it , -7*nTi^^ 

[0 19 7] ±jSOiiW«l3l7?tt. E K B077 
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mtZtctiXDll K B*y #*-«>a VtWB*«Tfc4&lE 
[0 1 98] ±5ELfcd:5l^ J— ; > 3 >iJ7. 

— ? &sk j: y i mmmztt l t a > =r > y aiB***? 
& □ >^ yvv>%m*ms. tc&&& y *n 

Ttix Ell 4«ffl^TIHWLrcBWfb6«felflB»iQai: 
■< h;UH**--*£j*U *Sfc*-f h;U*-£IBIWI 
S»tt2 0 Ot^SBUMJlStia^P-y^JllttfflBWfkx 

-*©tn§*i3*jHTT*. 

[0 19 9] ?i^fias©filMl::o^T|gl3 ow^n-g 1 
^-h*ffl^TBWr*. £T* Xr^7S4 0 1H:S 
^TH£S»;U B£*f$=l Vt 1 V'yfcfBil LfclBtSJg 
#lc*fttt*^tifcaVy>yiBaa6ll©4ilB«IEW»fe 

H«BEW»©-b>*»**-bV*045lll«*ffl^TitfT 

[0 2 0 0] X^'V^S 4 0 2tCfc^T=l>7 1 > 

• >a muf^ttBSBIlKttMStifcH 
2 3 izm LTz U >3>'JXh tctS*ft*tifc*8S I 

EKB7U -«ffiEtc,fc*>y y -«*«a*j|fTLT 
fc<fcl,\ •> 7S 4 0 2 C 'J *'^r-> a >«!f (cfeU 

t*xr'> 7ic5i^ y <fs-*jtiTL^«^ii, 

[020 1] Xx->7S4 0 2©iJ ? Jf/r— > a >^Sic 
fcl^T =1 >t- > ySBISgBtf 'J 7 **l7Vftl/* 
^Stlfc*^ X7 1 'y^ > S4 0 3l!:i3^TBf-^'fb=l>7 1 
vy©IB«(l(»<r6©K*ajLij«!lfT*n» Xtv7S 
4 0 4tCfe^TBt^k=]>7 1 > , y©«^j!aS*' i ll«3-tL 

[0 2 0 2] ZlCDcfc3tHl. IB^JKft^ftJUfi^nrcaVT 1 



vys£i&3iciBU =1 > t 1 > \y e»^b© y ^ & 

[0 2 0 3] 03 1 Sffi^THHtfkUVxV'ytC 

» l ? 9 -v* ivs&tfmfi-a tifci bs a > y > v £ 

[0 2 0 4] Xf^ys 5 0 1 Kfcl^T, i¥£gBlifB 
T^v7S5 0 2i::fc^7\ *fhn>*-, tv^jH 
EEIiHfcfift££L&l^*& (S503 : No) It, iE=yfc 

[0 2 0 5] &imilHtfjt#ftLftjH (S5 

03: Yes) H\ Xrv^S 5 0 4lcfc^Z^SiiE 
W»©«BE#*ff*ft*. 2imiiHllB<DttEEfi« 

(D&mtf O K T'fe y jEStti^tB* *l* <h 35CX x ■> f\z 

[0 2 0 6] Xf7 7S5 0 5T'li l^BiaaE^ 

d) tffcyajsfu y#-^«aE*ff*3. y ^* 
2{±Sua?oi§i 2 3 <t> y <k-<7 ij x h y -aw 

mwa y *- ^ t wje* *i* t *x x -» yizm 

[0 2 0 7] S5 06T(±. /f-<?+-i7-< 

x-?m**-t±$ i c(citt0jiL/=j:-5^ mar, fips iso 

-17S46Sn7l^M-v>/aBlllilSH A - 1 *ffl^-5^ 
-^^> ?07f B»lc»r3 < / \ v -> a HCMH&sr 

(H1 5#bb) S<i:^5i^-r«c:<i:T-5Ri6«<. 

[0 2 0 8] :*KS 5 0 7tCjl^^-f l-;U+- (Title 
Key) *§E*tiiLs K*dlLfc* -f HU*-<hxy 7.? 
llW*-6^5^ ^-T h;U@#*-*^fiB (Ell 6#BB) 

[0 2 0 9] S50 8TU SSiSBttSS-T'C* □ > 
T>V : r-ZC>-?Uv<? : r-$Z:m.3l-&?<, S 509T* 

U Sl^ny^T***^^ 777 7SS 1 0(e 
fc^rmi tc5>r UT*ia**ifc3 vt 1 v-ytBis 
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[0 2 10] ^fy7S5 1 1?tt, 7Py^r-^(D 
ftsS© 3 2 tT-i- h (ATS fc^fcXP •> -7 • v— K) £ 
S507?£j$Lfc£'<hJl'BHi*-£&£, W7n 

(HI 7#BS) r^.o 

[0 2 11] S 5 1 2"c*fcJu 7D-^*-tffll^7n 

FIPS 46-2T-5«;£3-tl« D E S (Data Encryption Stand 
ard) #»B*;rlS. 
[0 2 12] S513T, ^x-^SH^ttLfcfr**] 

ay©7 s -*©jaB*Xff*-«. 

[0 2 13] ZOcfcdlCs &HSgliiEfES©fcliEs a^T 1 

vu/fetiga© u ?©*■!*.. Bt^-fbzi yj-ywj 
tu r ©*fraa s l fc c <t iz t □ > y v •> 
©«»> nmmifmfj* tiz ztiztez„ 

[0 2 14] *|c % H3 2*mi>T*4 r-;l/*-fc»L 

[0 2 15] ^777560 1 Kfcl^T. Jf^gBtelB 
USttfrS^x-r T*s tVX^ I D^UE^ttJU 7. 
7 1 >>7 p S6 0 2(cfc^^ hJb+- r$>$;H 
£u £MB1iHBB©R*ti}L*)ttfr3. ii^St 
8IW»ifM?£Lfcl/>W& (S603 : No) (i, IEii& 
IHfiSQSlc £ £ □ > ^ > T te ft <h £ tu J«|$© 

[0 2 16] iiMSKEW«4m^LfcJfd (S 6 

0 3 : Y e s) t* s Xr7 7S6 0 4 Kfcl^TiiUfl&liE 
H»©8SiEtf*?T;Jrti*. £HftliEl&B©ttfE(i. IS£ 

mwft&GTZ'AmmsEWW'DWn'gmz'tj a 3 -t 

©WEtf O K 76 y lEiHttjOTIH*** i^7f -v Zf\,z 

^?±*ns^jiagt±^7r^o 

[0 2 1 7] 7?77S 6 0 5Ttt* ^MSiiEB^ 

•frS3>?vyiB**J«TLfcia»SB©«»J? ( I 

d) tfB?ytb*n» 'Jtf-v&tt'tto* y*-?* 

atiSu2E<7)E 2 3 © 'J #— * U 7 h ^S^ti-y "J -asR 
««fl!>^T*i*i»icj:oTJI?T**i*. a>r>ffl)HI 
ga© u *- o&ft^t <t x * y ioi 

ff±*n»s»att*7r*. 

[0 2 18] XT7 7S 6 0 6t6^T*'f h;U 



©?*5?*;ub:&©ote*«5t*o x^^yua*©*!! 

tt, jESttffl««E*tifc45M«EWa/rS«iyttLfc=l 
;Wa*©«Htf O K T-3B y jESttfl««B*ft* i^r 

•>ytcjitj 0 iEiMi*fc«sEtfNG©jf-&«, iu.m<Dwm<D 
*tT<«»±**i»^»att«7r*. 

[0 2 19] S6 0 7TMU y^-r 7 ? *-<t7 r -r 

X*B«*-fttfcU:BttllLfc«fc3U\ FIPS 180 

-1T > S4&SftTl'»*/Vi'->aHttS H A- 1 Sffl^SS 1 
aH^^P y -7 BWtca-3 < / \y S/a ^^^ffifflt 4*JS 

(Hi 5#a> a £*bbt* 

[0 2 2 0] ^lCS6 0 8ttii**-<h;l/*- (Title 
Key) *K*au R*ttJLfc*-r 

h#*-a»6» <r-r hiummr-c^is (hi 6#a) 
fa, 

[02 2 1] S 6 0 9 Ttt, »£«BttW£T'** U > 
7>7x~ ^©^P-y^x- **gS*aiTo X7 7 7S 
6 1071*, 7Pv*x-*©JBS©3 2tr-y h (AT 
S*atr7n'y* • K) iS60 8T£fiBLfc*-< 
h/l/Sf*-iAS, f©7n7 7©7-?^«§t5 
BT^XPv**-*^ (HI 7#BH) -r^o 

[0 2 2 2] S6 1 1T'tt, 7"P-v?*-£ffll>TXP 
v^f f -4r*a#r*. ar^TVl/ZPJXAt*, /c<t7l« 
FIPS 46-27*fllS* tl£ D E S (Data Encryption Stand 
ard) tfllSftS, 

[0 2 2 3] S 6 1 27\ £x-**BB*mL7cfr*!pJ 

U *7 f -**ai*aLTL^a:»7*lUrS6 0 9U:RoT 

ay©^-*©*^**^*. 

[0 2 2 4] C©«fe3lC, SiM«H^a©«iE, 
>yE««B© 'J #—>©*!*» flHFka >x> l >©* 

r / <T©*fttfafiL/'cc < !:(c»'3^Ta>7=>y 

©iEattij«PJ3£*tU Bt#fb3>x>y©E««#*»6 
[0 2 2 5] ±3!©J:^tc. □Vy>y5 r -4'©iaWf 

<*te*[r«iaai«©B»{b«a. fi^tfiBttam^e© 

»j?*»c»^t» 3>5r>'y©Bg^fb«vaffl©a» $ 
rctta*afflffl©«**ar*. 

[0 2 2 6] S3b\ ±5aL7t«Ttt, ^7-f7+-?ffl 

i^T=i>7 i > , y7 :; -*©^'fbSQs, is&zftim&mz 

T«&<, «»©IBaB^ga(cttii©^X*-*-. 
**l , 'ttlBaH*»H*©7 s /W^*-*E K BA^Sffi 
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[0 2 2 7] ±a©«t5lc> *»WKfe^Tt4» IBSil? 

; n* «t 4J M«E*»* x - * t « tciaur * 

WKIBfi-r* cfc o ic L7V*4>T\ t> L^IEtcfBfiS^tl 
©SBS£11fffB« Lfc*M»S-p**fflT, 'ST.?- 

[0 2 2 8] tret, iB»«^«tfy-**R*ai*- 
ftt^c tswiBLfcflHEx-i * *m3*mTmi£t Lit. 

EOCttCfcy, TCE&EMttlltf* ^FJEfciBfty-* 
t>fl>lc LTl^S t <h t,lt, ^iEJ&^BT-IBS* tlfc 5 s - 

[0 2 2 9] [E«ffllKfeW-*afc:-»J»] *T, =1 

x^s^fcsat^fc^Tx >*>©=] tf-*wjwr 
[02 30] us. 3>x>y*E«i»t!:iair*» 

[02 3 1] ; ?©<J;-3fc=i>7 : > , ;/©i]t?-$!l 

1 ©Kl*S££ll©ftBili:o^T» 03 SfcitfEIS 4 

[0 2 3 2] g:f\ ttSWPS©?^ 'JZlW&SOi^Z/T 

yv*s iawKf*jEE«r*«*iEfi^TU:, §33 

El 3 3 (A) ©fiQS^O^TK^-r-So El 1 ©IBS 
#£S§1 0 0«ffiltLT3WIT*o x-f ^iMl*©=l 
(^-f 5?*;U3>5r>y) tf, «|jl(f, IEEE13 
94->',l7 , ;U/ta»*rt>LT» AtBTj I / F 1 2 Ofcttfft 
Sft^t, X7 77S 7 0 1 KfcUT, AttJ73 I /F 1 

2 011 ^TV^/^VT^'^^gffiU Xt-V? 

s 7 o 2 icJMr. 

[0 2 3 3] 7T77S 7 0 2 7B, AttTD I/F12 



1 2 oA^gfiLfcav^^-yA^^ks-tiT^S^Jl^ 

(«AHfs ±»©DTCP*ffiflH*riE» 

AttlTJ I /F 1 2 0^«»e*nfc»^) Kt4, 

[0 2 3 4] lBf$W£gBl 0 OtfDTC PK* 

l!flLTfSS1lT*»*<kU DTC PtC^oTSQg^H 

firsti©**-*. dtcptu □tf-**j»-r*fc 

»©ae-#J»flHBiLT0 2tr'y I- (7) EM I (Encrypt 
ion Mode Indicator^Si^S-ftTl^-So EMIfi<00 

b (B«» 2 jmrt**c£**t) 

2>if -&14, □ >f>"ytfa 'J -<Dt£D (Copy-free 

ly)TS*iI<!:*aL-. EM I tfO 1 B ?£%4Ha {£ 

i& *nj-x±©:3 

&l/"t>© (No-more-cop i es) T£ £ C i: £ S 

E M I & 1 0 B 3Vf>y]fit, 1 mm* 

3 tT— LT&l N &© (Copy-one-generat i on) T*£>2> Z. t 
EM I AM 1 B7»**«$lctt» =l>x>^ 
3b\ =1 fcf-tfttit^ftT^-S t© (Copy-never) 

[0 2 3 5] IB&«£gSl 0 0©Atti7D I/F120 
tiafS^K E M I tf^th, •?"© E M I t\ Co 
py-freely-¥>Copy-one-generationTS^<h^{Ct4, 3> 
xVVttatf-RTireSStWeSft*. EMI 
*\ No-more-cop ies-¥>Copy-never'c?J6'£<!:*tC (4, 
=1 tf- RrHTftt" t*. JS* 
[0 2 3 6] 7x'v7S 7 0 2(CjJ^T. 

~S7 0S^+77LT, IB»«aS*«7-r«. fifo 

[0 2 3 7] X7 7 7S 7 0 2tCfet>T» =l>x 

7 0 3KJ1*, WTx ZrvT'S 7 0 3~S 7 0 5lCfc 
^T, H3 (A) 0X777S 12, S 1 3, S 1 4£ 

fiit*«yi4iRi*©*Qatfffto*i*. rft*>-6» tsjq 

S#S3 0 OtC<fc« h-5>X?K- h/^y r-tC^TSA 

t sftfiik Bf^jais#is i 5 o izi$vzv8mt!m&& 

ftl 9 5tcfBSLT. IBS«»«»7'r«. 
[0 2 3 8] ftfi, EM Hi, Affi7Dl/F1 2 0 tC# 

3>7->ytt*>lZ* EMU EM I £1381 

^embedded CCI3&£*) tlBS^n^o 
[0 2 3 9] C©», — flSWKte, Copy-One-Generatio 

n*8rnMJ4» *tiw±©3tr-*fr*at' k «fca, no- 

more-copiestC^g|?tlTsBS*ni.c 

[0 2 4 0] *^©IBSS^S7t4, d© E M I 
embedded CCia^©3t:-*!lW1HI«» TS/^»hK 
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titta? ip-e, ill 0(Dm2^m3(D^ 

ATS&2 4tf ;/ r-fcl^L3 0tf-;/ r-tt£, Pfcf 

nam**. 
[0241] ^(.gp^s^z^-n^f^zivxv^^, 
IB^i®<*tClHi5-r^lg-&lCfc^T(ix E13 3 (B) coy 
P-^f- ht;:Lfc6^fc§B^SA^7fcti^ 0 El 3 3 

(b) (D&mii-.i^TmBnTZo T-ru^m^ai^y^ 

y"J (T^P^PV^y;/) t\ Aii}7J I /F 1 4 0tC 
08&*ft*£:, AttJ* I /F 1 4 Otis Xt^S7 1 
Ifcfi^T. SOy^a^PV^VJ/^SfgU Xry 
^7 121:1^ §<fLfc7 7 ^-P^=l>7 1 > > >A\ P 

[0 2 4 2] CCT\ 1 2 ©fUSiaSti, 

\mtl I / F 1 4 0?BWLfcfl»l«U 
Ifv'a V(Macrovision){§-^-¥\ CGMS-A(Copy Gen 
eration Management Sy stem-Ana I og)fl|^<?$$*iS 

1 4 0T?S«Lrcfll*^$$n*Ji^{ttt % T^P^P 
[0 2 4 3] STc, fidilJf, CGMS-Afs^ix ?<< 

5?9JIHB9«)=1 ^-*MB(cffl^Sh* cgm sfi^*, 
T^P ^fl»« P fcT-IMWE»B Lfcfi^Tv P >t> 
y tfP fcf- 7 U (Copy-freely). 1 g7£ttPtf 

— LTSl/"k<£i (Copy-one-generationk £7ct*P fcf— 
*^±*tlTt^t© (Copy-never) CO o *>(D^T't\T'& 

[0 2 4 4] SfoT* CGMS-Afi^ AiJ7J I / 
F 1 4 0T*SfI Lfc«*fc^*tU fro, fOCGMS 

— A fit^A\ Copy-free I y¥>Copy-one-generat i on£|g L 
Tt^Jf^-lcti, yi-n^ziy^yyit, pfcf-RjtgT* 
SStWmS. $7ts CGMS-Afa^-6\ Copy-n 
ever**LTl/**»£fcW:» T^P^P yj- yvte^ P 

[0 2 4 5] *e.^ fj^fcf, 7^0^3X1^ 
CGMS-A<gft,, AU* I /F4?S«Lfcfl»U: 
$$*ifci/>if 7'^-p^'P>7 1 > , yti, Ptf-Rj 

[0 2 4 6] 7 1 2tCfc^Tx T^P-J^P > 

t 1 >«> #p fcf- Rrtgra f <t we* tifc a t 1 » 7 

S7137bIS71 75X+77LT, IB®5QS^7 
■T^o 'fc-oTs P>x>>yi±. iBii£fls: 

1 0 ICSBIS* *V41\ 

[0 2 4 7] $fc. Xy'yys 7 1 2tCfc^T, 7^"P 

t^^S 7 1 3\,zm^ IXT. XT7 7S 7 1 37bm.S 
7 17fc£l^T, El 3 (B) ^77 2 271jSS 2 



VxVU/tfxv^UggS, MPEG^L 

A»<bjQatf4**iTis«f*iEia«4tu ibmus* 

[0 2 4 8] Aaj73 l/F 1 4 OTgfSLTcT 7 ^ 

P^'fl-^tCv CGMS-A«^$SnT^-Stg-g-lC. 
T'^-P^PV5 i > , y^iB^iS<*(CiBfir«<!:S-tCt±, * 
©CGMS-AfUffc, IB«««*lCfBa*tl*. BPS. 
El 1 OTtrL/cC C I fcL<ti*©fte©tiS$8<DSW*i::* 
E®flM#IB»*ft*. CCIS, — ttttlctt, Copy-One 
-General \on*m?mmt. *tOU±CDZ\ tf-^s^fc: 
L^<fc5s No-more-copieslcSSi*nTSB«*n*o tctc 
L, z/Xr-jUctS^TtcbXlt fCopy-one-generation 
<DP fcf— JBKSHt $8li. No-more-cop ieslc^-t^-rtCiaSS 
No-more-cop i es t L Tift 5 J Hil<D)l/— 

[0249] msjuHcsi** □ tf-ww sb 

4 (A) ©7n-**-McLfctfofcJ!4»SjtMT:b 
tlS, El 3 4 (A) 0D»am-3^TSWr*o S-TKTO 
ICs X777S80 1, S8 0 2, S 8 0 3 fcfcl/>Z'» 
EI4 (A) ®Xx77S3K S3 2, S3 3U:33t73 

«*U**ifcBW{ba>y>vtfB8^Mra#«i sole 

ft^T^tifcx-rv^^^PVxvyiis /U1 i o^5> 
LT, Att7D I / F 1 2 0tC{«J^*n* o 
[0 2 5 0] A**l/F1 2 0(i, 7777S8 04 

^^:fc^,^T. ^ c Kffi^ftS x-r v*^ ;up Vt 1 y vti\ 

»?=ifc;-R[i6atifl!)fr£a3B»*wjer*. sn-Ss 

t£s At±J7J l/F 1 2 Olc^^n^x-r^vUPVT- 
yyicEM i s s^^ti, em i tffimc^e—ffltm 

[02 5 1] $7^ ^Jxtf, AJ±i7J I /F 1 2 OKt^ 

tfoT, EM I mEMZtlfrmSlZlt, ZCOEM I (IB 
S*tLfcEM I (Recorded EMI) ) t\ Copy-free I yTS 
*<h*K(±, x-i-V'^;UP>5 1 > , y«, STP fcl-pjfil 
StCT'SSt^jn*. £tc. EMI6\ No-more- 
coplesT»*t*(cti % PV^^'yW, &T-P tf-BJfil 

[0 2 5 2] — mmzlt. IBS^nftEM I 6\ 
Copy-one-generation-^Copy-neverT'S^il <t(±Sl\ C 
opy-one-generationiDE M I tilBSBflCNo-more-copies 
izgik-gtls &Tc. Copy-neverOD E M I ^Jf-Qx-C *J* 
llziy^yyit, IBlWll»tcE«**iat^6T**. 
TcTzL, •^Xf-hlZii^Tfct^.li TCopy-one-generat 
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ion©P fcf-ftiJWtSgWs No-more-copieslcS^-S-rtc 
ISStt"^)A\ No-more-cop iesi: LTffi'Sj &c£:flD;l/— ;l/ 

[0 2 5 3] AT-VfS 8 0 4tCfc^T. P>7 1 >U<' 

x>>yS8 0 .5lCji^ Ai±J^I I /F 1 2 OH -^©x 

[0 2 5 4] Ittc. Xrvys 8 0 4lCfcl^T> P>x 
^ Z?y7S8 0 6lCit*» Attl* l/F 1 2 OH 

[0 2 5 5] IP'S, ixtf, ±a©«fc3fc» IB»?n/c 
EMItf, No-more-cop iesTS 5*§£- (t>L<H >A 
xAlCfcL^T/hi^.tf rcopy-one-generation<DP fcT— 
SfelWUHBH No-more-copiesK^&tf-riclBS?"**^ 
No-more-cop iesi J t^=>)U— ll/tf : &&>=>tlT 

t^Ts ■f-©*tFT?E»* E M I #Copy-one-gener 
ationT£*iS£) icli. a ^-tUXhOP 

[0 2 5 6] ClOfcg), Affi* I/F12 OH DTC 

ffl#««iEa&aia7?***& KCTtt, DTC 
P©«HH=*lttLfe*11?**»*) KH tV5?*/I/ 

[0 2 5 7] §a»«*fCffia?ftfc=J 

&jc£ltTH H3 4 (B) 07Q-ff- hKLfctf 
ofcBSSttSt'SfirtonSo E3 4 (B) ©«BllCOt>T 
BWW*. X5 : -J/ys 8 1 1 ftMS 8 1 SfcfelT, H 
4 (B) OXTiy^S 4 175MS 4 5 tciiW-fcfflgtlH 

Affl*tfW5fh«. c*iK«fcyffSti*7'^af f a> 
x>*J>H A£ii7D I /F 1 4 0?Sfl*tl«. 
[0 2 5 8] AUtfJl/FI 4 011 Xfy7S8 1 6 

*lTt^fe3>7->yteEM I fc^tDPkf-ftJffllflBjb 1 ^ 
oL.fcKfBK^nTl^ftl/'Jil^teH ^OD^VzV'y 
H «T3t;-Rriia:t,OT**4:i»J***l*. 
[0 2 5 9] ttcs 3>T>y<D&&mZs mx&DT 
C P commt LfctfoT, E M I $fc«P tf— fN^flt IB 
#E«S*lfcii$fcH Copy-free I yTS 

*i*teH p>x>*yH *?□ fcr-RTtefcfce!>T»» 

[0 2 6 0] $fc % EMI $tcltZH?-#mmm&. No 
-more-copiesTJ6**&, fcL<H ->AxAtcii^T 



tctz.\£ rCopy-one-generation©P£— ftJfflHfSiH N 
o-mo r e-cop i es lz K sSMT 2> i\ No-mo r e-cop i e 

f^T7*SB»?tl/cEM I $fctt:3fcf-*fl«t$Ej{FCopy-o 
ne-generationT'Jfc^if-n-KH PV^V^H ^T'P 

[026 1] ?61C, #Ja.H AtU73l/F1 4 0K« 

ti-sJf^ se-^T. =i>x> , y©iaiiBt(c, ■?■£>=] >^ 

V7«tit,i:CGMS -Afc^tftBaSftfciidfcH 
^©CGMS-A ffl-^jb\ Copy-free I yT&£ <h * K 

S<h*US*n*o CGMS-A{f^b\ Copy-nev 

er7?*«<t*tct*. 7'^-P-?'=l>"5 1 > , >H &TPbf- 

[0 2 6 2] 7T77S8 1 6(C&tv? % P>x>y 
tf» «Tat-Rn6T»*tW**ftfeli*s Xt77 
S8 1 7 Kit*, ASJ73 l/FHOtt, *-£tC«fSS 

*»7-r*. 

[0 2 6 3] 3:7c, 7T7 7S 8 1 6(::fc^T\ PVx 
77S8 1 8 £31*, Atil7: I /F 1 4 OH T^D? 

3Vxyy*, ^T^p^PV-^r/'ytf&TPt?-* 

[0 2 6 4] ffl-fi, flJAH ±5E©J:3tc, E»*nfc 
EM I S?<0Pk?-&IWlf$fi3b\ No-more-copIesT 1 *** 
□ ftKIt ->7.7 1 Atcfc^Tfci:^.«' rcopy-one-g 
enerationOP tf-$iJfflffi|gH No-more-cop iestc^ 
H:-?lzlzmTZ>h\ No-more-cop ies<t LT&oi tl^o 
;U-/l/#3W&S*i7V£\ ^-OSfeffTTSaSJnfc E M 

I ^©P tT-$iJ1i1ff86 , 'Copy-one-generationT-S«Ji 

[0 2 6 5] ZLOTcisbs ABJ73 I/F140H T^P 
Copy-never*«-TGCMS-Afl|**finHiLT. ^ 

a3tciU73-r*c ztzs mxa. iBas^ti/cCGMs-A 

iE^b\ Copy-neverTS^Jfn-tC i fc> ayf/ya, * 
tLJi<±<DPtr-«fiF?tl&l\ ZLOtcOb. AffiTDl/F 
1 4 0 (i. C G M S - Aff^^Copy-neverlcSM LT> 

[0266] jm±©*5ic» n>y>y©iifc:-iw»* 

^L^^S^ P>x> y <7)iBi5H££?T 3 C <t lc «fc »J , 

[0 2 6 7] [r-^S[lS¥S0«^] ±3iL/i: 
— A- K^iT'lc^ytTaciti^iiS, V 
7 h'7i7'^<j:yS5iI<t:tT**= IPS. Bg 
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i#IS3 0 0t5!lISy7 h^xTncfcoTSfcrrT^C 

*©V7H 1 >x7 , *«J$T*:7p$ r 5i» 
5flffl©3>fcf 0.-^-^1 f-y -?Oy*'('7UZ\y\ZzL 

[0 2 6 8] T/P^Atts 3Vfcfa- frfcpgiRSftT 
l^faSatfttLTO/N- KtVT.^2 0 OS^ROM 
2 0 0 3 fc*ttE»LT4J< 

^P^5i*tt7Pytf- (fmnflD 7^7^ CD- 
ROM (Compact Disc Read Only Memory), MO (Magnet 

0 optical)^*.'?, DVD(Digital Versatile Dis 
c), ttft^wx^s ¥9*y«yft£4>Uii-st7Jl>E 
&$£<*2 0 1 OK, — B$ttS£lN|*&tttt(cttM (IB 
fS) LT£<C,!:#T-*3. co>J:3ftyii-/f7/i/G 
ii*£<*2 0 1011 Irt>»«/ty4— 5?V7 hfi7i 

[0 2 6 9] yp4f5ixtts ±aLfccfc5* l JA 

-M'?VHB^Sg{*2 0 1 OfrSPVfcfa-^lC-OXh 

Lfc'A LAN (Local AreaNetworkk < h 

IBSU PVfcfi— S?TH ^-0«fc3ltLTlEai*nT 
<57P^&, iM»2 0 0 8TSffiU war* 
/\- Kr-f 2 0 0 

[0 2 7 0] PVtfa— S»tt % CPlKCentral Process 
ing Unit) 2 0 0 2*rt»LTf*. CPU20 0 2C 
{*, /U200 1^LT, Atil±)-r>^7i-^2 0 

1 1tf»«ShTfi'J, CPU200 2B, xtu*-r> 
^7i-72 0 1 O^fl-LT. a-+ffC«fc^T, *-* 
- F-¥»7'JX» , ?«rt**l*A*«2 0 0 7tfHff*tl 
* c <k {c «fc y » fctf AT: * ft* 4\ ^LfctfoT, 
ROM (Read Only Memory) 2 0 0 3 (CttM$tlTV«? 

[02 7 1] $.5^li, C P U 2 0 0 2li, M- Kx-f 
7.^2 0 0 SlCtejiflS-ftTt^^P^A, fcjMSlX 
h7-*#5IB3&**U i!fIS32 0 0 8T*g«£ 

ftrn- 2 o o 5icr>7. h-;i/*nfc^p 

Sfct* K^<^'2 0 0 9fC^«*tlfcyA-/^ 
7;HaWW*2 0 1 0fr6K*ttl**iT/\- 
200 5tC-r>Xr--;Ui-n/i:yP^5A^. R A M (R 
andom Access Memory) 2 0 0 4 (CP— KLTH^f £><> 

[0 2 7 2] CniaU^ CPU200211 ±3SL/c 
:7P-* + -HELfc#ofc»S» t«^l*±aLft? 



PU2002H fanae**, j&wcjsut* ai* 

tf\ XiHM>-$iyx-X2 0 1 1*^L^ LCD(L 
iquid Crystal Display)*xe-a*Tto8Sft;5lWj 
332 0 0 6frZiiit)s SSWi, ilftffi2 0 0 8&<?>m 
iS, arSKtt, n— KxVT.-? 200 5tcfB«g?-y-^o 

[0 2 7 3] iMHMNcfe^T, 3>tfi-r 5» 

^saro^s^^fc-y-^fcibo^p^^A^fBaiT^SQ 

I7T771*, &rLt»:7P-**-h£LTI3«;!rft 

[0 2 7 4] Sfc, fuV^LAt, 1£>P>k?a-*K 
*y«3*ft*fc©?«-3T , e»a^U *»©PVei 

7p?7A(1 S7J©=l>t:°i-^lci£jM*nTII 

[0 2 7 5] *£tt«»Btt-pf* % P>x>y©B 

*ft/t»*ff5 7py**, ■\=f-vy<Dv$mt/ia& 

LS IT«JSBr*fl!l*«fi&iLTKWLfc#s P>^> 

tCPU1 7 0 tfUfrta 1 h'j7x7' : Ev''x- 

#I83 0 0£)jaHlfcCPU1 7 OA^tT^I 
h'?x7 ,: E^a-iUi:LTS|3Hr*Ci:fl 5 R]|6T-**c 

[0276] eu. ftmommmz&mLfttfs. 
fBK Ltz&mm&cDmmcDmz&m-r^-F&Zo 

[0 2 7 7] 

* tiariwiiaMiMtfx - * *« SBiBis&wci Eit-r * 
l6lc:g#©x^;Mi*iJ«klfiiBi«SEi!8**x-$t 
KiciB^-r^c c<oci:tcj:y, flnreiBttrsMK 

*«1SL. 3>f>y|!ll«ttU £PMMiE91«« 

y, ^jESfBsss^ t fesfB@s=i>7 ; > , y£3Dfijffi m 
m (DVimmmtfBimttez, ?FiEicfB^*n 

<D#IJfc{«?*.*o 
[EISOtS^&SJB^] 

[Hi] *nwoit«SB«ii^ji©«i^«y*^r^p 
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[02] *aH(DflmiBftS£S11fc£^Taffl«!rh3 

&MttEE«*<o«i*^riaTas«. 

[0 3] *&H©11iai3ftB^Ba7-*IBtta37 
[0 5] *ftH©flmiBaff£SB££^T409$tlS 

[06] *snn©ifaia*s^si»u:feitsh^>^# 

- h • X h U-A (T S) «M*«flD*«*^r7P » 
[07] *H«l©1iraifB«S^«U:fct>T«S*tiS 

[08] *%93®1ffmBft*£*M££U-«h7>;i# 

- h • x h y-z» (t s) mm^mcomm^mryay 

[09] *ft9J©11HRiaS£^BK£U-« h7>Xtf 
-h -XHJ--A (TS) ««#lia;o«W6*wf 7*ny 
?0T*£5o 

[010] *^©inffliaaB^BtcauNT«yi3-ti 
©«fiEfi»j*^r0T*«*. 

[011] *38iE©iii«fB«g£&B£*rr* e k bbb 

[012] *3ftH0fltMBai!£3illlc&*-«*-Eft 

tc^zrti* e k B©«y^-r0T-$-So 

[013] *Sffl^1ff«IBMig£SB(C&tf3>7V7' 
E K B *££ LtdBtB9$tm.mB3affl*m*n? 

[01 4] :tM01MIEaiKEaMlc&i*«*7V7' 
[015] ^WOfltHESBSttBKSUtTVlRrie 

[016] *^©it?gsBfiff^gaicfc^T. iiffipr 
[017] *sifli©i««iB»»^sijHtfetN7:5Sfflpra6 

[01 8] **£©ff*8IB^£&Bfc£tt«7 r -*IB 
[01 9] *»W<Dif«IB««^»tcfc^TBB^b=l 

[020] *8B£©tff&iEiiii£gSK^T!Biisn 
[02 1] *8E©1t«SBS«£«Bte;l3^T*-r h;b 

iawr*7P-0Tfi*c 



[02 2] *f^©fl|$BiBtil¥£gEK;fcn*ax-*g 
[0 2 3] *8«©1*fltBaB£SBK£^TfiJffi;<r*i 
[02 4] *«W©1ffflS8li^BlEfc^T E K BBB 

[0 2 5] *»H©1imfB*B£&fl££^T9JlRrfle 
ftWab-fb*- ^P-y* (EKB) UD7*-77 hflSSS 

[02 6] MMt*-Z?Uv9 (EKB) ©$-?©*$ 

[02 7] U#— ?I>7V5^TO£©7cA&©EKBi6 

WflaK-s^TBttBraH (in ts-s. 

[02 8] U<K-^I>x-fy-fW3e©fc46©EKBa 

[0 2 9] 'J<K— ^XVx-i-x-rW^fc^OE K Big 

[03 0] *3BE©«?llSB««£SBfc3Sl/>?5**« 
HE LT9-9m£Z'tt 5 «a*KWT * 7 P-HT» 

[03 i] *HB©««ie»®£gBfc;fcL>Tiis^b=i 

S*KB^-r57P-07$*o 
[03 2] *»«©flmEftS££BK£l'>T$'r h;U 

KWr*7P-HT**. 

[033] ^HaimiBiKBssBicstt-sx-^fB 
ft-usBm t:-#ja«Q3a*Kwr*7P-^-v- 

[0 3 4] ^^©BfcfBas^BfcfcttSx-**! 

*»a^©pkr-*"jfflWQa*gim-r57P-^-f- 

[035] ^^©maiBiuv^sBtcstTs 
sag* v 7 k ? i t it ^ zmnr * ^©am^istis 

R?^©SHBJ3] 

1 0 0 IBI§S3e£B 
1 1 0 

1 2 0 Atil*) I /F 

1 3 0 MPE 

140 A*7:l/F 

1 4 1 A/D, D/A3V/t- S 

1 5 0 Bg^ffl3I#f& 

16 0 ROM 

17 0 CPU 

18 0 ^=E'J 
190 K7-T7 
200 IB&«{* 
210 E«W*I/F 
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300 TS«»« 
6 0 0, 607 fiffi-? 

6 0 2 tf h 'J 

6 0 3 P L L 

6 0 4 *<fl>.X*>7ft£EB& 
6 0 5 vtzs- Kf^fiPStt 

6 06 XLK-z/>?jKy?T 

8 0 0, 8 06 (KP 

8 0 1 7p**s/-f*h»bui 

8 0 2 iS^*J^[slK 

803 J±&§g 

8 04 *<5>^«*iatt 
80 5 27MHz^n«y? 
90 1, 9 0 4, 9 1 3 fiSS? 
902 MP EG^IV^-^ 

9 0 3 tr^** h 'J -A/ W 7 ^ 

9 0 5 MPEGt-7-<tI>a-^ 
9 0 6 h U - A/ W 7 T 7 

908 *MibZ>4-&3.-5 

90 9 h7>Z#-hst4-y hft^ftS 

9 1 0 H*^YAX^>7ft»^© 

9 1 1 ^Py^Sz-KftfiDEBS 



9 1 2 XJi-pyMyyT 

976 

10 0 1 A^-i>3> 
10 0 2 t7X 

1 003 x-^-O* 

1 0 0 4 ZftiU'O* 

1 00 5 ■*#^T>4r 

1 0 0 6 x-££P 
10 0 7 

10 0 8 S£ 

2001 Ax 

2002 CPU 

2003 ROM 

2004 RAM 

2 0 0 5 7\- Kf^X^ 
2 0 0 6 iti^gP 

2 00 7 A*jSG 

2 0 0 8 ilfias 

200 9 K5<<^ 

20 10 U^-y^HBIWI# 

20 11 AS^^7i-X 



[01] 



TOO 



4 



^ 



no 



120 

.0 



A/D. O/A 



141 



130 



^ ^ ^ MPEG u 



150 



CPU 




mm* 
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[01 8] 



c 



3 



S101 



8102 



i — > 



S103 



S104 



c 



[020] 



[03] 



(A) 









i 


• 


(TSM) 














3 





311 



S12 



S13 



(B) 



C 



EMI 

I 



S21 



„S23 



MPEQimb 



CUM) 



MHHbM 



— i^.S24 
S25 



S26 



7r-f;ui 
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